MAL-2026-2706

    Dashboard / Malicious Package / MAL-2026-2706

    MAL-2026-2706

    Published: 16 Apr 2026Last Modified: 1 Sept 2026Aliases: 
    GHSA-37c3-3hx2-jvj5

    Summary: Malicious code in @3stripes/sdk (npm)

    Details: Source: amazon-inspector (78177fb122038c79210d2b2a9b477a78c4d918bfc9819382745e541503a7e8ea) The package @3stripes/sdk was found to contain malicious code.

    References: https://github.com/advisories/GHSA-37c3-3hx2-jvj5

    Affected packages

    Package

    Name: @3stripes/sdk

    Purl: pkg:npm/%403stripes/sdk

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    999.0.0
    999.0.2
    999.0.3