MAL-2026-2496

    Dashboard / Malicious Package / MAL-2026-2496

    MAL-2026-2496

    Published: 6 Apr 2026Last Modified: 7 Apr 2026

    Summary: Malicious code in chess-sec-ssrf1 (npm)

    Details: Source: amazon-inspector (25205345915fdf089bcbd90b35f9e852c02281bd7452805479d18c610063ac52) The package chess-sec-ssrf1 was found to contain malicious code. Source: ossf-package-analysis (74303ac236c7f5386e2fc96d7ac2a7bbf1d0054efcce03f04a10fe49216bd02e) The OpenSSF Package Analysis project identified 'chess-sec-ssrf1' @ 1.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: chess-sec-ssrf1

    Purl: pkg:npm/chess-sec-ssrf1

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1
    MAL-2026-2496 | CVE-DB