Vulnerability MAL-2026-2912
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 months ago
April 15, 2026 at 11:43 PM UTC
Malicious code in trgrip (npm)
*
*
Summary
Malicious code in trgrip (npm)
Details
trgrip is a malicious npm package that when imported downloads a C2 dropper from https://44.206.172[.]239:7443/direct/download/97900a0e-c691-483a-a988-97b76f205c0f and executes it.
References
Impacted packages
Timeline
Published
6 months ago
April 15, 2026 at 11:43 PM UTC
Last Modified
12 hours ago
November 10, 2026 at 08:30 PM UTC