MAL-2026-2912

    Dashboard / Malicious Package / MAL-2026-2912

    MAL-2026-2912

    Published: 15 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in trgrip (npm)

    Details: trgrip is a malicious npm package that when imported downloads a C2 dropper from https://44.206.172[.]239:7443/direct/download/97900a0e-c691-483a-a988-97b76f205c0f and executes it. Source: amazon-inspector (3b787c102a6313ef9eaafaedccd83ab634da290283df07b97c4c4eb62117ad55) The package trgrip was found to contain malicious code.

    References: https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805

    Affected packages

    Package

    Name: trgrip

    Purl: pkg:npm/trgrip

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-2912 | CVE-DB