New: Corgea AI Pentesting — autonomous penetration testing in hours, not weeks
CRITICAL npm Malware

Malicious code in npm-show-date-proof-strings (npm)

MAL-2026-6791

Published · Modified

Description


__

Source: ossf-package-analysis (a2ca450bd74580e87a2f428fd6fcfe66ac30e7a2a88e214da7d3628915549db6)

The OpenSSF Package Analysis project identified 'npm-show-date-proof-strings' @ 1.0.3 (npm) as malicious.

It is considered malicious because:

  • The package executes one or more commands associated with malicious behavior.

Ready to move

Start Securing

Free, no credit card | First findings in minutes