MAL-2026-2389

    Dashboard / Malicious Package / MAL-2026-2389

    MAL-2026-2389

    Published: 24 Mar 2026Last Modified: 7 Apr 2026

    Summary: Malicious code in spectral-module (npm)

    Details: Source: amazon-inspector (0b458f8a3676b73711c711d763768712cc0bf1f7fb7233a87fb8b5817b7c509c) The package spectral-module was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: spectral-module

    Purl: pkg:npm/spectral-module

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.0.0
    MAL-2026-2389 | CVE-DB