—
MAL-2026-10905
Malicious code in win-build-utils (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: amazon-inspector (03bd3facc00c36861223058a572fbaa888d815a06c7b309c44639c544c65f1d9) The package name suggests a Windows build helper utility, but no concrete behavioral evidence is available to confirm or refute installer-side risk. No exfiltration, install-time fetch, credential access, or other attack-class behavior was observed. The package warrants human review to confirm contents and intent before issuing a public verdict.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm / win-build-utils
No fixed version published yet for win-build-utils (npm). Pin to a known-safe version or switch to an alternative.