MAL-2026-3

    Dashboard / Malicious Package / MAL-2026-3

    MAL-2026-3

    Published: 1 Jan 2026Last Modified: 2 Jan 2026

    Summary: Malicious code in rules-deployer (npm)

    Details: Source: amazon-inspector (849a58d27ed0090633a72330c705b5849146aa1493961574c6a11dc758e28e34) The package rules-deployer was found to contain malicious code. Source: ossf-package-analysis (c4db6440dc23c5dddffabd81ff195cbea3783192fe2d62d25402ac3c8f1f4699) The OpenSSF Package Analysis project identified 'rules-deployer' @ 0.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: rules-deployer

    Purl: pkg:npm/rules-deployer

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    0.0.0
    MAL-2026-3 | CVE-DB