MAL-2026-1484

    Dashboard / Malicious Package / MAL-2026-1484

    MAL-2026-1484

    Published: 16 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in internal-lib-vulnerable (npm)

    Details: Malicious package due to data exfiltration, arbitrary code execution during installation via preinstall script, and suspicious hostname. Source: amazon-inspector (b46f6c2b8b094dc4a9864676457c3ea2af565204d854ab4cf1eb27be87aaa878) The package internal-lib-vulnerable was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KKV1FBC1KM86MSX3WYWV3RS2

    Affected packages

    Package

    Name: internal-lib-vulnerable

    Purl: pkg:npm/internal-lib-vulnerable

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-1484 | CVE-DB