MAL-2026-1041

    Dashboard / Malicious Package / MAL-2026-1041

    MAL-2026-1041

    Published: 23 Feb 2026Last Modified: 1 Mar 2026

    Summary: Malicious code in secure-monkey (npm)

    Details: Source: amazon-inspector (86cd85a74e391ecd4f01e0ca9a2f8db368edc52021d175bb01a957669f2301ba) The package secure-monkey was found to contain malicious code. Source: ossf-package-analysis (3c75ad29fdd83c7c6a16e25ec8443546c2baa3175e2312174126049002428b9b) The OpenSSF Package Analysis project identified 'secure-monkey' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: secure-monkey

    Purl: pkg:npm/secure-monkey

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2026-1041 | CVE-DB