MAL-2026-1582

    Dashboard / Malicious Package / MAL-2026-1582

    MAL-2026-1582

    Published: 19 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in whatnot-manifests (npm)

    Details: Source: amazon-inspector (2f0504ddd24de9ec3870bb8fc657436f5a61e3f6327f0e044bc380bfe3479d40) The package whatnot-manifests was found to contain malicious code. Source: ossf-package-analysis (050ffab3343a46b5adab9d17bf1d817086d336b52579f1f9c416e05355707873) The OpenSSF Package Analysis project identified 'whatnot-manifests' @ 99.0.4 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: whatnot-manifests

    Purl: pkg:npm/whatnot-manifests

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.0.4
    MAL-2026-1582 | CVE-DB