Malicious Package Affecting epic-alt-utils package, versions =0.0.0=0.1.0=0.2.0=0.3.0=0.4.0=0.5.0=0.6.0=0.7.0=0.8.0=0.9.0=1.0.0=1.1.0=1.2.0=1.3.0=1.4.0=1.4.15=1.5.0=1.6.0=1.7.0=1.8.0=1.9.0=2.0.0=2.1.0=2.2.0=2.3.0=2.4.0=2.5.0=2.6.0=2.7.0=2.8.0=2.9.0=3.0.0=3.1.0=3.2.0=3.3.0=3.4.0=3.5.0=3.6.0=3.7.0=3.8.0=3.9.0=4.0.0=4.1.0=4.2.0=4.3.0=4.4.0=4.5.0=4.6.0=4.7.0=4.8.0=4.9.0=5.0.0=5.1.0=5.2.0=5.3.0=5.4.0=5.5.0=5.6.0=5.7.0=5.8.0=5.9.0=6.0.0=6.1.0=6.2.0=6.3.0=6.4.0=6.5.0=6.6.0=6.7.0=6.8.0=6.9.0=7.0.0=7.1.0=7.2.0=7.3.0=7.4.0=7.5.0=7.6.0=7.7.0=7.8.0=7.9.0=8.0.0=8.1.0=8.2.0=8.3.0=8.4.0=8.5.0=8.6.0=8.7.0=8.8.0=8.9.0=9.0.0=9.1.0=9.2.0=9.3.0=9.4.0=9.5.0=9.6.0=9.7.0=9.8.0
Threat Intelligence
Exploit Maturity
Snyk has reported that there have been attempts or successful attacks targeting this vulnerability.
Attacked
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-EPICALTUTILS-20074710
- published24 Sept 2026
- disclosed24 Sept 2026
- creditUnknown
Introduced: 24 Sep 2026
New Malicious CVE NOT AVAILABLE CWE-506 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Avoid using all malicious instances of the epic-alt-utils package.
Overview
epic-alt-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship.