mal-2026-1706
Vulnerability from ossf_malicious_packages
Published
2026-03-18 12:46
Modified
2026-03-23 05:16
Summary
Malicious code in ddddddd1d (npm)
Details
-= Per source details. Do not edit below this line.=-
Source: amazon-inspector (2b26bb490eddaee9c3130c572772252e4959e395be8f786d04e125aed7f6c9da)
The package ddddddd1d was found to contain malicious code.
{
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "ddddddd1d",
"purl": "pkg:npm/ddddddd1d"
},
"versions": [
"1.0.0",
"1.0.1",
"1.0.2",
"1.0.3",
"1.0.4",
"1.0.5",
"1.0.6",
"1.0.7",
"1.0.8",
"1.0.9",
"1.0.10",
"1.0.11",
"1.0.12",
"1.0.13",
"1.0.14",
"1.0.15",
"1.0.17",
"1.0.18",
"1.0.19",
"1.0.22",
"1.0.23",
"1.0.24",
"1.0.25",
"1.0.26",
"1.0.27",
"1.0.28",
"1.0.29",
"1.0.30",
"1.0.31",
"1.0.32",
"1.0.33",
"1.0.34",
"1.0.35",
"1.0.36",
"1.0.37",
"1.0.38",
"1.0.39",
"1.0.40",
"1.0.41",
"1.0.42",
"1.0.43",
"1.0.44",
"1.0.45",
"1.0.46",
"1.0.47",
"1.0.48",
"1.0.49",
"1.0.50",
"1.0.51",
"1.0.52",
"1.0.53",
"1.0.54",
"1.0.55",
"1.0.56",
"1.0.57",
"1.0.58",
"1.0.59",
"1.0.60",
"1.0.61",
"1.0.62",
"1.0.64",
"1.0.65",
"1.0.66",
"1.0.67",
"1.0.68",
"1.0.69",
"1.0.70",
"1.0.71",
"1.0.72",
"1.0.73",
"1.0.74",
"1.0.75",
"1.0.76"
]
}
],
"credits": [
{
"contact": [
"actran@amazon.com"
],
"name": "Amazon Inspector",
"type": "FINDER"
},
{
"contact": [
"https://www.reversinglabs.com"
],
"name": "ReversingLabs",
"type": "FINDER"
}
],
"database_specific": {
"malicious-packages-origins": [
{
"id": "RLMA-2026-01238",
"import_time": "2026-03-19T12:18:44.905743857Z",
"modified_time": "2026-03-18T12:46:12Z",
"sha256": "d71ee6cec2b26384c338e49483c8f011ef7ad32b03deae100582c6ed978cdeb0",
"source": "reversing-labs",
"versions": [
"1.0.0",
"1.0.1",
"1.0.2",
"1.0.3",
"1.0.4",
"1.0.5",
"1.0.6",
"1.0.7",
"1.0.8",
"1.0.9",
"1.0.10",
"1.0.11",
"1.0.12",
"1.0.13",
"1.0.14",
"1.0.15",
"1.0.17",
"1.0.18",
"1.0.19",
"1.0.22",
"1.0.23",
"1.0.24",
"1.0.25",
"1.0.26",
"1.0.27",
"1.0.28",
"1.0.29",
"1.0.30",
"1.0.31",
"1.0.32",
"1.0.33",
"1.0.34",
"1.0.35",
"1.0.36",
"1.0.37",
"1.0.38",
"1.0.39",
"1.0.40",
"1.0.41",
"1.0.42",
"1.0.43",
"1.0.44",
"1.0.45",
"1.0.46",
"1.0.47",
"1.0.48",
"1.0.49",
"1.0.50",
"1.0.51",
"1.0.52",
"1.0.53",
"1.0.54",
"1.0.55",
"1.0.56",
"1.0.57",
"1.0.58",
"1.0.59",
"1.0.60",
"1.0.61",
"1.0.62",
"1.0.64",
"1.0.65",
"1.0.66",
"1.0.67",
"1.0.68",
"1.0.69",
"1.0.70",
"1.0.71",
"1.0.72",
"1.0.73",
"1.0.74",
"1.0.75",
"1.0.76"
]
},
{
"import_time": "2026-03-23T05:14:26.612398721Z",
"modified_time": "2026-03-23T05:11:41Z",
"sha256": "2b26bb490eddaee9c3130c572772252e4959e395be8f786d04e125aed7f6c9da",
"source": "amazon-inspector",
"versions": [
"1.0.0",
"1.0.1",
"1.0.2",
"1.0.3",
"1.0.4",
"1.0.5",
"1.0.6",
"1.0.7",
"1.0.8",
"1.0.9",
"1.0.10",
"1.0.11",
"1.0.12",
"1.0.13",
"1.0.14",
"1.0.15",
"1.0.17",
"1.0.18",
"1.0.19",
"1.0.22",
"1.0.23",
"1.0.24",
"1.0.25",
"1.0.26",
"1.0.27",
"1.0.28",
"1.0.29",
"1.0.30",
"1.0.31",
"1.0.32",
"1.0.33",
"1.0.34",
"1.0.35",
"1.0.36",
"1.0.37",
"1.0.38",
"1.0.39",
"1.0.40",
"1.0.41",
"1.0.42",
"1.0.43",
"1.0.44",
"1.0.45",
"1.0.46",
"1.0.47",
"1.0.48",
"1.0.49",
"1.0.50",
"1.0.51",
"1.0.52",
"1.0.53",
"1.0.54",
"1.0.55",
"1.0.56",
"1.0.57",
"1.0.58",
"1.0.59",
"1.0.60",
"1.0.61",
"1.0.62",
"1.0.64",
"1.0.65",
"1.0.66",
"1.0.67",
"1.0.68",
"1.0.69",
"1.0.70",
"1.0.71",
"1.0.72",
"1.0.73",
"1.0.74",
"1.0.75",
"1.0.76"
]
}
]
},
"details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2b26bb490eddaee9c3130c572772252e4959e395be8f786d04e125aed7f6c9da)\nThe package ddddddd1d was found to contain malicious code.\n",
"id": "MAL-2026-1706",
"modified": "2026-03-23T05:16:26Z",
"published": "2026-03-18T12:46:12Z",
"schema_version": "1.7.4",
"summary": "Malicious code in ddddddd1d (npm)"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…