Malware advisory

MAL-2026-4347

Malicious code in @devcarron/clob (npm)

2 affected releases in the PkgRadar corpus · published 2026-05-25 · upstream advisory

Affected packages

Package	Ecosystem	Version	Verdict	Scanned (UTC)
`@devcarron/clob`	npm	`0.0.1-security`	High risk	2026-07-14
`@devcarron/clob`	npm	`2.73.0`	Low risk	2026-05-30

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

MAL-2026-4347 — malicious package advisory | PkgRadar