MAL-2026-1585

    Dashboard / Malicious Package / MAL-2026-1585

    MAL-2026-1585

    Published: 18 Mar 2026Last Modified: 1 Sept 2026Aliases: 
    GHSA-w4ff-rwjv-9xxj

    Summary: Malicious code in @anchor-ds/core (npm)

    Details: Source: amazon-inspector (9aaac3fbc20e4d10a4fcf379fa4637f05e1dccd9fb6123bdd9b0e26ce5e21854) The package @anchor-ds/core was found to contain malicious code.

    References: https://github.com/advisories/GHSA-w4ff-rwjv-9xxj

    Affected packages

    Package

    Name: @anchor-ds/core

    Purl: pkg:npm/%40anchor-ds/core

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.9.0