et_phone_home

{"modified":"2026-11-02T09:44:21Z","schema_version":"1.7.4","id":"MAL-2026-18607","summary":"Malicious code in et_phone_home (npm)","details":"Runs on install. The postinstall script fetches a path from a bare IPv4 address with wget, contacting a remote host from every machine that installs the package. Version examined: 0.0.5; tarball SHA-256 58f9b4c9c26abe6ac52353ce1e0a824fba06c8aa7cefa94d2d4805306053e82c.","affected":[{"package":{"ecosystem":"npm","name":"et_phone_home"},"versions":["0.0.5"]}],"credits":[{"name":"Oluwatosin Amokeodo","type":"FINDER","contact":["mailto:oluwatosin.amokeodo@gmail.com"]}]}