MAL-2026-2829

    Dashboard / Malicious Package / MAL-2026-2829

    MAL-2026-2829

    Published: 17 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in paddle-internal-scripts (npm)

    Details: Malicious package due to sensitive data exfiltration via obfuscated `preinstall` script. Few published versions increase suspicion. Source: amazon-inspector (eae655788b800d689464263a26d904ccb45fe4aa65b61422a51325008aff3003) The package paddle-internal-scripts was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KPD1FWQBDFM2VKEKHXYKMXKD

    Affected packages

    Package

    Name: paddle-internal-scripts

    Purl: pkg:npm/paddle-internal-scripts

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-2829 | CVE-DB