OpenSSF/OSV advisory MAL-2026-14580 confirms this npm version as malicious. The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code.
Advisory
MAL-2026-14580
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)
Details
The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code.