MAL-2026-2285

    Dashboard / Malicious Package / MAL-2026-2285

    MAL-2026-2285

    Published: 29 Mar 2026Last Modified: 31 Mar 2026

    Summary: Malicious code in dial-app-version (npm)

    Details: Source: amazon-inspector (9efdd5b481d49a0d9ac535aedde75dbf5638bd85e7efe9c536d2938c57142799) The package dial-app-version was found to contain malicious code. Source: ossf-package-analysis (2708b4f6c8fba40d24ccf0abe6369cb348897b35a070092f0b8b4ac45f651059) The OpenSSF Package Analysis project identified 'dial-app-version' @ 9999.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: dial-app-version

    Purl: pkg:npm/dial-app-version

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    9999.0.1
    9999.0.0
    9999.0.3
    MAL-2026-2285 | CVE-DB