MAL-2026-18607

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/et_phone_home/MAL-2026-18607.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18607
Published
2026-11-02T09:44:21Z
Modified
2026-11-04T09:00:05Z
Summary
Malicious code in et_phone_home (npm)
Details

Runs on install. The postinstall script fetches a path from a bare IPv4 address with wget, contacting a remote host from every machine that installs the package. Version examined: 0.0.5; tarball SHA-256 58f9b4c9c26abe6ac52353ce1e0a824fba06c8aa7cefa94d2d4805306053e82c.

Credits

Affected packages

npm / et_phone_home

Package

Name
et_phone_home
View open source insights on deps.dev
Purl
pkg:npm/et_phone_home

Affected ranges

Affected versions

0.*
0.0.5

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/et_phone_home/MAL-2026-18607.json"