MAL-2026-2718

    Dashboard / Malicious Package / MAL-2026-2718

    MAL-2026-2718

    Published: 16 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

    Details: Source: amazon-inspector (046b5475599d30f293f2eeb7ab9fce35c44cd678ab2cecde2c96e588a170d822) The package @the-coca-cola-company/receipt-scanner-admin-lib was found to contain malicious code.

    References: https://safedep.io/sl4x0-dependency-confusion-campaign

    Affected packages

    Package

    Name: @the-coca-cola-company/receipt-scanner-admin-lib

    Purl: pkg:npm/%40the-coca-cola-company/receipt-scanner-admin-lib

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    9.9.0
    9.9.9
    MAL-2026-2718 | CVE-DB