Vulnerability MAL-2026-2497
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
7 months ago
April 06, 2026 at 09:11 AM UTC
Malicious code in commerce-utils (npm)
0.0.1 - 0.0.2
0.0.1 - 0.0.2
Summary
Malicious code in commerce-utils (npm)
Details
Malicious package due to data exfiltration to a suspicious host, combined with arbitrary code execution during preinstall.
References
Impacted packages
Timeline
Published
7 months ago
April 06, 2026 at 09:11 AM UTC
Last Modified
11 hours ago
November 10, 2026 at 09:30 PM UTC