MAL-2026-2018

    Dashboard / Malicious Package / MAL-2026-2018

    MAL-2026-2018

    Published: 21 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in @modals/blockchain (npm)

    Details: Source: amazon-inspector (9883b4336552c287c2c3ed9bb5888cc22173cd8b39fd181552f858607f0ffa70) The package @modals/blockchain was found to contain malicious code. Source: ossf-package-analysis (21323c6073b08f12b7cdd4f39bddd6eddde6bcde93041da8b41df45b79ae89e1) The OpenSSF Package Analysis project identified '@modals/blockchain' @ 99999.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: @modals/blockchain

    Purl: pkg:npm/%40modals/blockchain

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99999.0.1
    99999.0.0
    MAL-2026-2018 | CVE-DB