MAL-2026-2861

    Dashboard / Malicious Package / MAL-2026-2861

    MAL-2026-2861

    Published: 19 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in vinext-monorepo (npm)

    Details: Source: amazon-inspector (b5c7279d5c84c989a0deef7944c5d1d22b89651bdc01da8fc5144622a8fc74cb) The package vinext-monorepo was found to contain malicious code. Source: ossf-package-analysis (574f240251e7be8dcdf3c0b77c1df87b69497f67e98d64b831a36ab87c2d08de) The OpenSSF Package Analysis project identified 'vinext-monorepo' @ 99.10.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: vinext-monorepo

    Purl: pkg:npm/vinext-monorepo

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.10.9