MAL-2026-2866

    Dashboard / Malicious Package / MAL-2026-2866

    MAL-2026-2866

    Published: 9 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in @tableau__catalog-messages/database_lower (npm)

    Details: Source: amazon-inspector (4155e0aa6cc429c2ea66b3b131055983379b13cab66b74fa3c1758e83a48ec54) The package @tableau__catalog-messages/database_lower was found to contain malicious code. Source: ossf-package-analysis (d29e8bcb2336d78e40b4d6ff2512beb6286c3426bb33d27a41abdbeb98d59c68) The OpenSSF Package Analysis project identified '@tableau__catalog-messages/database_lower' @ 99.9.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @tableau__catalog-messages/database_lower

    Purl: pkg:npm/%40tableau__catalog-messages/database_lower

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.9.9