carbon-mac-copy-cloner

{"modified":"2026-04-16T15:42:08Z","published":"2026-03-18T12:41:53Z","schema_version":"1.7.4","id":"MAL-2026-1666","summary":"Malicious code in carbon-mac-copy-cloner (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a38d75b9f18088f693edfe80cca42e9c3688457b43560fa568b6f547b9f464c5)\nThe package carbon-mac-copy-cloner was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"carbon-mac-copy-cloner","purl":"pkg:npm/carbon-mac-copy-cloner"},"versions":["1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.1.10","1.2.1"]}],"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/npm-fake-install-logs-rat"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"6dc10e5a9da8538054e84562f967ff14ffcb99ee93aebe555a91d0a95e5e7942","import_time":"2026-03-19T12:18:35.756437367Z","id":"RLMA-2026-01138","modified_time":"2026-03-18T12:41:53Z","versions":["1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.1.10","1.2.1"]},{"source":"amazon-inspector","sha256":"a38d75b9f18088f693edfe80cca42e9c3688457b43560fa568b6f547b9f464c5","import_time":"2026-03-23T05:14:37.371734079Z","modified_time":"2026-03-23T05:11:41Z","versions":["1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.1.10","1.2.1"]},{"source":"reversing-labs","sha256":"1287ed0a0d9b2f4b5fd028c26a7b821290b6d5371ba1cc4e12e7cbac16de1851","import_time":"2026-04-16T15:39:26.551066251Z","id":"RLUA-2026-01906","modified_time":"2026-04-16T09:48:08Z"}]}}