MAL-2026-2417

    Dashboard / Malicious Package / MAL-2026-2417

    MAL-2026-2417

    Published: 24 Mar 2026Last Modified: 7 Apr 2026

    Summary: Malicious code in oc-navbar-module-client (npm)

    Details: Malicious package due to code obfuscation, dynamic code execution, suspicious email, install script, and low project popularity. Source: amazon-inspector (ec0eedd88f7d05d96544d4fc778561471c0490c16f2fe2c6e8c70428af92e6ad) The package oc-navbar-module-client was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KMFAPKSX0V3CFVW9PE769MX6

    Affected packages

    Package

    Name: oc-navbar-module-client

    Purl: pkg:npm/oc-navbar-module-client

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-2417 | CVE-DB