{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "package_integrity": [
            {
              "filename": "probe-0.0.1.tgz",
              "hashes": {
                "sha1": "d18608ac5b818dd7b0ae93f99957f1bffa70860e",
                "sha512_sri": "sha512-BB9p9Ej8/b1kA7662dAB9iyY0UXdXaJ4xh2ejK7fehstY5rBUDO4GTg8H1T8Th7ejA0i9pmLvtzohPtj27KsNQ=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "@gleamkit/probe"
      },
      "versions": [
        "0.0.1"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-007274",
        "import_time": "2026-06-23T16:54:13.771559474Z",
        "modified_time": "2026-06-23T16:22:20Z",
        "sha256": "aaef237007e5d89031d334bf56a29892c7d6103aba9563b040556eea20ef2cfa",
        "source": "amazon-inspector",
        "versions": [
          "0.0.1"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (aaef237007e5d89031d334bf56a29892c7d6103aba9563b040556eea20ef2cfa)\nNo suspicious behaviors were detected in this package. There are no lifecycle scripts performing remote fetches, no credential or environment scraping, no hardcoded exfiltration endpoints, and no obfuscated payloads. The package contents do not exhibit any of the known supply-chain attack fingerprints.\n",
  "id": "MAL-2026-6306",
  "modified": "2026-06-23T16:22:20Z",
  "published": "2026-06-23T16:22:20Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@gleamkit/probe/v/0.0.1"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in @gleamkit/probe (npm)"
}