{"id":"MAL-2026-7057","summary":"Malicious code in @buglab/pino-pretty-logger (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-fx88-m6v3-mhqh"],"modified":"2026-09-01T11:30:41.507455174Z","published":"2026-07-07T12:19:08Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2026-07-07T12:19:08Z","sha256":"a10ad224100184ace0c024af2a4f242d3419658b2bb4256b5bd78910f54506bc","source":"reversing-labs","versions":["1.1.0"],"id":"RLMA-2026-04695","import_time":"2026-07-09T09:15:51.424428784Z"},{"modified_time":"2026-08-24T16:19:57Z","sha256":"fc0b8b5d2810657473b01ad0eb2ab12426e24810730912c15aa5c5787c696667","source":"reversing-labs","id":"RLUA-2026-05836","import_time":"2026-09-01T11:17:40.189908336Z"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/claude-promptmink-malware-crypto"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fx88-m6v3-mhqh"}],"affected":[{"package":{"name":"@buglab/pino-pretty-logger","ecosystem":"npm","purl":"pkg:npm/%40buglab/pino-pretty-logger"},"versions":["1.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@buglab/pino-pretty-logger/MAL-2026-7057.json"}}],"schema_version":"1.9.0","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}