MAL-2026-1997

    Dashboard / Malicious Package / MAL-2026-1997

    MAL-2026-1997

    Published: 20 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in ty-web-session (npm)

    Details: Source: amazon-inspector (15f6d0a640d7d4323f1ef52969a6a259b9b6e3bacc2bf65f514cd618a00945a9) The package ty-web-session was found to contain malicious code. Source: ossf-package-analysis (9507cb60c86468a7c12b26e35e0501ebd750e48a8e7decbc5996460e1c229e95) The OpenSSF Package Analysis project identified 'ty-web-session' @ 3.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: ty-web-session

    Purl: pkg:npm/ty-web-session

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    3.0.1