MAL-2026-2415

    Dashboard / Malicious Package / MAL-2026-2415

    MAL-2026-2415

    Published: 24 Mar 2026Last Modified: 7 Apr 2026

    Summary: Malicious code in oc-aa-module-client (npm)

    Details: Multiple pieces of evidence suggest malicious intent: hex obfuscation, dynamic code execution, suspicious email, and install script executing index.js. Source: amazon-inspector (0ff9a96329ad67bbc8f97ec7686f7f6a8f1b94bb76be3f8f48671cafde13fc4c) The package oc-aa-module-client was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KMABKRPYDY3VGBN9J1Q0FJR9

    Affected packages

    Package

    Name: oc-aa-module-client

    Purl: pkg:npm/oc-aa-module-client

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions