PkgRadar

Malware advisory

MAL-2026-4564

Malicious code in finup-mongo-library (npm)

5 affected releases in the PkgRadar corpus · published 2026-05-21 · upstream advisory

Affected packages

PackageEcosystemVersionVerdictScanned (UTC)
finup-mongo-librarynpm4.1.2High risk2026-07-14
finup-mongo-librarynpm4.0.9High risk2026-07-14
finup-mongo-librarynpm4.1.3High risk2026-07-14
finup-mongo-librarynpm4.2.1High risk2026-07-14
finup-mongo-librarynpm4.1.5High risk2026-07-14

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

MAL-2026-4564 — malicious package advisory | PkgRadar