MAL-2026-10881

    Dashboard / Malicious Package / MAL-2026-10881

    MAL-2026-10881

    Published: 20 Jul 2026Last Modified: 1 Sept 2026Aliases: 
    GHSA-hmhf-84x5-f526

    Summary: Malicious code in @irys-solutions/odesa-main (npm)

    Details: Source: amazon-inspector (525ae6b33885c1153dac485b830c8977b433ba4cdd2cc9556415b146ed801569) No malicious behavior was identified in this package version. No lifecycle scripts performing remote fetches, no credential reads, no exfiltration endpoints, and no suspicious code patterns were observed. With only two files in the package and no concerning content, there is no evidence of installer-side harm.

    References: https://www.npmjs.com/package/@irys-solutions/odesa-main/v/1.0.0, https://github.com/advisories/GHSA-hmhf-84x5-f526

    Affected packages

    Package

    Name: @irys-solutions/odesa-main

    Purl: pkg:npm/%40irys-solutions/odesa-main

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2026-10881 | CVE-DB