CRITICAL npm Malware

Malicious code in @3stripes/toolkit (npm)

MAL-2026-2708 · GHSA-pfgm-5fhw-w44m

Published · Modified

Dependency scanning

Check whether @3stripes/toolkit is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Description


__

Source: amazon-inspector (4529c8ef3e0953799338bc7e0cc7d6ce4f1d8797b3e0984d362ebd26df6bec1c)

The package @3stripes/toolkit was found to contain malicious code.

Ready to move

Start Securing

Free, no credit card | First findings in minutes