New: Corgea AI Pentesting — autonomous penetration testing in hours, not weeks
CRITICAL npm Malware

Malicious code in debugcli (npm)

MAL-2026-6790

Published · Modified

Description


__

Source: ossf-package-analysis (dd4fa31ed29d493ac05d6ec17a90f51fe68008b674268e1751c4b25792703b8d)

The OpenSSF Package Analysis project identified 'debugcli' @ 4.3.9 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

Ready to move

Start Securing

Free, no credit card | First findings in minutes