MAL-2026-2411

    Dashboard / Malicious Package / MAL-2026-2411

    MAL-2026-2411

    Published: 24 Mar 2026Last Modified: 7 Apr 2026

    Summary: Malicious code in @wame/ngx-adfs (npm)

    Details: Malicious package due to hex obfuscation, dynamic module loading, process access, suspicious install script, and untrustworthy project. Source: amazon-inspector (ee67ae68f066d11c3e0625e260c588df3d43384ae91fe74292977ea5304684d9) The package @wame/ngx-adfs was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KMABKA7CX2PB8624PGWYR15A

    Affected packages

    Package

    Name: @wame/ngx-adfs

    Purl: pkg:npm/%40wame/ngx-adfs

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions