MAL-2026-313

    Dashboard / Malicious Package / MAL-2026-313

    MAL-2026-313

    Published: 16 Jan 2026Last Modified: 16 Jan 2026

    Summary: Malicious code in spire.officejs-fonts (npm)

    Details: Source: amazon-inspector (85e04f3e2745bb2e3fd9eac19b0b9c45ad94c1ead97c8a9a4a1db6d412bd39eb) The package spire.officejs-fonts was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: spire.officejs-fonts

    Purl: pkg:npm/spire.officejs-fonts

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions