MAL-2026-2412

    Dashboard / Malicious Package / MAL-2026-2412

    MAL-2026-2412

    Published: 24 Mar 2026Last Modified: 7 Apr 2026

    Summary: Malicious code in @wame/ngx-frf-utilities (npm)

    Details: Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. Source: amazon-inspector (bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da) The package @wame/ngx-frf-utilities was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KMABK9ECS0K76F8KTBAFAGEB

    Affected packages

    Package

    Name: @wame/ngx-frf-utilities

    Purl: pkg:npm/%40wame/ngx-frf-utilities

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-2412 | CVE-DB