Vulnerability MAL-2026-2907
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 months ago
April 16, 2026 at 02:50 AM UTC
Malicious code in nj-logger (npm)
*
*
Summary
Malicious code in nj-logger (npm)
Details
nj-logger is a malicious npm package that when imported in file dist/logger/telemetry.js downloads a trojan (for Windows only, W64.AIDetectMalware / Trojan.Malware.300983.susgen) from http://178.128.88[.]40:8080/download/svc to path node_modules/.cache/nj-logger/nj-transport-win32-x64.node and executes it. Downloader is obfuscated as telemetry module, urls & paths are base64 and XOR encoded.
References
Impacted packages
Timeline
Published
6 months ago
April 16, 2026 at 02:50 AM UTC
Last Modified
7 hours ago
November 11, 2026 at 01:30 AM UTC