MAL-2026-2019

    Dashboard / Malicious Package / MAL-2026-2019

    MAL-2026-2019

    Published: 21 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in @modals/layout (npm)

    Details: Source: amazon-inspector (2dd7a47296a1be165b33bf8cc140bf4b6b004025557cfb22a0b75c4ec8eea864) The package @modals/layout was found to contain malicious code. Source: ossf-package-analysis (423ea5070da3529e74e772e47cd0109f3dfc4a483645bfd0537e9007bd9ec60d) The OpenSSF Package Analysis project identified '@modals/layout' @ 99999.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: @modals/layout

    Purl: pkg:npm/%40modals/layout

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99999.0.0
    99999.0.1
    MAL-2026-2019 | CVE-DB