MAL-2026-1732

    Dashboard / Malicious Package / MAL-2026-1732

    MAL-2026-1732

    Published: 18 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in express-ranges (npm)

    Details: Source: amazon-inspector (72e2924456833204b2201e4c108e394c45b7f35695aa2bb4a1048528ef95b78e) The package express-ranges was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: express-ranges

    Purl: pkg:npm/express-ranges

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    3.7.7
    MAL-2026-1732 | CVE-DB