MAL-2026-2955

    Dashboard / Malicious Package / MAL-2026-2955

    MAL-2026-2955

    Published: 20 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in megabank-worklist (npm)

    Details: Source: amazon-inspector (51f0a379223d486978f097d6f97b1d3a1fd307bb725be56c7baa2bc8ff72d297) The package megabank-worklist was found to contain malicious code. Source: ossf-package-analysis (67b82e2f7e8ec078f92a9f21610cd4f1347f25bbf96416e0a76ade90b60d242f) The OpenSSF Package Analysis project identified 'megabank-worklist' @ 999.99.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: megabank-worklist

    Purl: pkg:npm/megabank-worklist

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    999.99.9
    MAL-2026-2955 | CVE-DB