OpenSSF/OSV advisory MAL-2026-3328 confirms this npm version as malicious. The package pocpoc2626 was found to contain malicious code.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in pocpoc2626 (npm)
Details
The package pocpoc2626 was found to contain malicious code.
## Source: ossf-package-analysis (0176ec0fde390432553ec3dffa91438e5e923d23549ef4b836bc91de5259a21d) The OpenSSF Package Analysis project identified 'pocpoc2626' @ 99.99.9998 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Decision reason
OpenSSF Malicious Packages via OSV confirms pocpoc2626@99.99.9998 as malicious (MAL-2026-3328): Malicious code in pocpoc2626 (npm)