malware npm
changiairportpromax
discovered 2026-05-27Wave 1 package from terminal3airport. Contains Scramjet-based web proxy (Lucide Proxy) with popunder ads, external ad/tracking scripts, and Google Analytics. Disguised as tutoring website.
Threat types
other
Malicious versions
- 1.1.3
