MAL-2026-2257

    Dashboard / Malicious Package / MAL-2026-2257

    MAL-2026-2257

    Published: 27 Mar 2026Last Modified: 31 Mar 2026

    Summary: Malicious code in xpna-context (npm)

    Details: Source: amazon-inspector (678a96ef06b05d2ab867c1eea4dbed1cfc69f99cb4904e02c48736df0da7695e) The package xpna-context was found to contain malicious code. Source: ossf-package-analysis (6cc170474d756b38d5b918706ce87f0930a4e85fb0e94f66f43fd28d70cb4897) The OpenSSF Package Analysis project identified 'xpna-context' @ 1.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: xpna-context

    Purl: pkg:npm/xpna-context

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1
    MAL-2026-2257 | CVE-DB