#TinyParrot
Bought a cat water fountain at Costco for my birds. They approve! #petbirds #conures #tinyparrot
September 21, 2026 at 2:15 PM
Malicious code in tinyparrot npm v0.4.1 (CRITICAL): Remote code execution during install via obfuscated postinstall script. Uninstall & avoid immediately. https://radar.offseq.com/threat/mal-2026-10190-malicious-code-in-tinyparrot-npm-8e0728bab742b27e #OffSeq #npmsecurity #malware
MAL-2026-10190: Malicious code in tinyparrot (npm)
The tinyparrot package version 0.4.1 includes a postinstall script (src/build.js) that reconstructs strings such as 'https', 'POST', and the destination host 'rnjkerbf.org/P' from integer-encoded arrays using base decoders in src/const.js a
radar.offseq.com
July 12, 2026 at 12:00 PM