GitHub flags ambar-src on npm as malware with no patched versions
GitHub's Advisory Database published a malware advisory for the npm package ambar-src, warning that any affected machine should be treated as fully compromised.
Supply ChainJavaScriptMalware
16 Feb 2026
