Protet Intel / npm / @azure-growth/signup-ux-components

@azure-growth/signup-ux-components 1.2.2

confirmed malicious PROTET-NPM-2026-122

Every version of this package that Protet Intel names: Is @azure-growth/signup-ux-components malicious?

Records

OSV record PROTET-NPM-2026-122
Also reported in OSV as MAL-2026-18338
Feeds: NDJSON, Atom

Status history

2026-10-27: named as a Protet finding

Want to know if your own builds pull packages like this? Add the Protet GitHub Action.

Think this is wrong? Write to hello@protet.io and we will look at it.