MAL-2026-18404 — Malicious code in claims-acct-unlock (npm)
OpenSSF Package Analysis identified npm package claims-acct-unlock version 25.2.1 as malicious. The source states that the package communicates with a domain associated with malicious activity and executes commands associated with malicious behavior.
CERT24