malware
npm
@andrewstory18/is-real-odd
discovered 2026-09-18Reported by external campaign tracking as part of the MathMain npm Supply Chain Attack / Equation of Compromise family, not independently verified by SafeDep. Masquerades as a math/matrix/events/mutex/btree/graph utility; version ranges and dates as reported.
Threat types
rat c2_agent
Malicious versions
- 2.0.3
