Skip to content

MALICIOUS (1) campaign cataloged at 2026-05-18(2).

  1. The campaign has clearly malicious intent, like infostealers.
  2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2026-05-foundry-utils

In specific environments, the package triggers silent code execution during installation. The code to execute is not included in the package.

Abuse categories

dependency-confusion

An attempt to exploit dependency confusion

other

Campaign uses other.

Packages in the campaign

campaign:2026-05-foundry-utils