MAL-2026-1383

    Dashboard / Malicious Package / MAL-2026-1383

    MAL-2026-1383

    Published: 13 Mar 2026Last Modified: 25 Aug 2026

    Summary: Malicious code in @immuta/pxl-components (npm)

    Details: Malicious package due to data exfiltration, arbitrary command execution, and suspicious install scripts targeting dependency confusion. Source: amazon-inspector (03d86f67d7f931d0f720838a4bda33d56a54a5502b29ebe3e1094a984041b7a2) The package @immuta/pxl-components was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KKJTXE78BNTXQGTPY149GRCM

    Affected packages

    Package

    Name: @immuta/pxl-components

    Purl: pkg:npm/%40immuta/pxl-components

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.1
    99.99.0