Threats Tagged 'mal-2026-6793'

The neon-terminal npm package contains malicious code that executes shell commands immediately upon being imported or required. This code runs git commands in the user's current directory, automatically staging all files, committing them with a generic message, and pushing the commit to the configured remote repository. This behavior is undocumented and unrelated to the package's advertised function as an ANSI color helper. The malicious actions can lead to unauthorized commits, exfiltration of local files including sensitive data, and unwanted changes to git history.