SafeDep
Install GitHub App
Start for Free
SafeDep
Install GitHub App
Start for Free

Summary

Note: This report is updated by a verification record

osv MAL-2026-2449: Malicious code in mgc (npm)

Verification Record

WAVESHAPER.V2 / UNC1069 (Sapphire Sleet) - compromised npm package delivering multi-platform RAT via account takeover

Details

Note: This report is updated by a verification record

mgc@1.2.4Malicious
Verified
Analysed at: 10/11/26, 1:32 AM
Source: -
SHA256:
Confidence: High