—
MAL-2026-12067
Malicious code in hwi-lib (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: ossf-package-analysis (b354ab4fac90ce3cb0a5afb1a00d518a9a44e8a4da73e66845415e69ec620973) The OpenSSF Package Analysis project identified 'hwi-lib' @ 1.0.1 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm / hwi-lib
No fixed version published yet for hwi-lib (npm). Pin to a known-safe version or switch to an alternative.