cdn-img-fetch
Named by 3 kept items in this workspace.
2 items name it under affected products and 1 under classification.key entities.
Search every workspace for cdn-img-fetch. It matches the name as written, so it can find other things that share it.
The items that name it 3
Still live and installable; delivers movinlike Stealer
Malicious, versions 1.0.0-1.0.3; still installable as of 29 September 2026; advisory MAL-2026-17320 (published 30 September 2026) covers only versions 1.0.0 and 1.0.1, not malicious 1.0.2 and 1.0.3
All technologies in this workspace.