MAL-2026-7057Malicious code in @buglab/pino-pretty-logger (npm)
| Ecosystem | Package | Version |
|---|---|---|
| npm | @buglab/pino-pretty-logger | 1.1.0 |
{"schema_version":"1.7.4","id":"MAL-2026-7057","published":"2026-07-07T12:19:08Z","modified":"2026-09-01T11:20:23.610132766Z","aliases":["GHSA-fx88-m6v3-mhqh"],"summary":"Malicious code in @buglab/pino-pretty-logger (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"name":"@buglab/pino-pretty-logger","ecosystem":"npm","purl":"pkg:npm/%40buglab/pino-pretty-logger"},"versions":["1.1.0"]}],"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/claude-promptmink-malware-crypto"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fx88-m6v3-mhqh"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-04695","import_time":"2026-07-09T09:15:51.424428784Z","modified_time":"2026-07-07T12:19:08Z","sha256":"a10ad224100184ace0c024af2a4f242d3419658b2bb4256b5bd78910f54506bc","source":"reversing-labs","versions":["1.1.0"]},{"id":"RLUA-2026-05836","import_time":"2026-09-01T11:17:40.189908336Z","modified_time":"2026-08-24T16:19:57Z","sha256":"fc0b8b5d2810657473b01ad0eb2ab12426e24810730912c15aa5c5787c696667","source":"reversing-labs"}]},"credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}数据来源:OpenSSF Malicious Packages · Apache-2.0