MAL-2026-1666

    Dashboard / Malicious Package / MAL-2026-1666

    MAL-2026-1666

    Published: 18 Mar 2026Last Modified: 16 Apr 2026

    Summary: Malicious code in carbon-mac-copy-cloner (npm)

    Details: Source: amazon-inspector (a38d75b9f18088f693edfe80cca42e9c3688457b43560fa568b6f547b9f464c5) The package carbon-mac-copy-cloner was found to contain malicious code.

    References: https://www.reversinglabs.com/blog/npm-fake-install-logs-rat

    Affected packages

    Package

    Name: carbon-mac-copy-cloner

    Purl: pkg:npm/carbon-mac-copy-cloner

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.1.0
    1.1.1
    1.1.2
    1.1.3
    1.1.4
    1.1.5
    1.1.6
    1.1.7
    1.1.8
    1.1.9
    1.1.10