MAL-2026-1725

    Dashboard / Malicious Package / MAL-2026-1725

    MAL-2026-1725

    Published: 18 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in env-workflow-test (npm)

    Details: Source: amazon-inspector (6c69ec15e609dd6c0e6dacd007a2467cc5e24a118f60cca22ec48c3b8225c4df) The package env-workflow-test was found to contain malicious code.

    References: https://jfrog.com/blog/breaking-appsec-myths-obfuscated-packages

    Affected packages

    Package

    Name: env-workflow-test

    Purl: pkg:npm/env-workflow-test

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.1.4
    2.1.5
    2.1.6
    2.1.7
    2.1.8
    2.1.9
    2.1.10
    2.1.12
    2.1.13
    2.1.14
    2.1.15
    2.1.16
    2.1.17
    2.1.18
    2.1.19
    2.1.20
    2.1.21
    2.1.22
    2.1.23
    MAL-2026-1725 | CVE-DB