MAL-2026-2707

    Dashboard / Malicious Package / MAL-2026-2707

    MAL-2026-2707

    Published: 16 Apr 2026Last Modified: 1 Sept 2026Aliases: 
    GHSA-wq4q-g6ff-rpgf

    Summary: Malicious code in @3stripes/shared (npm)

    Details: Source: amazon-inspector (3ca39203b484afe25fca27596d3c3c81a0a6765ad88d3b129871375127bdb5ea) The package @3stripes/shared was found to contain malicious code.

    References: https://github.com/advisories/GHSA-wq4q-g6ff-rpgf

    Affected packages

    Package

    Name: @3stripes/shared

    Purl: pkg:npm/%403stripes/shared

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    999.0.0
    999.0.2
    999.0.3