MAL-2026-3297

    Dashboard / Malicious Package / MAL-2026-3297

    MAL-2026-3297

    Published: 3 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in ally-call-wait-time (npm)

    Details: Source: amazon-inspector (20246193f2fbde13a2dccd6325c1d46a7fec7e8491b4df3ae6fefa85eff99bbf) The package ally-call-wait-time was found to contain malicious code. Source: ossf-package-analysis (c2d0a1ca7cc7414bc364d4bc0b6474660711cfdcf8e522499692e26afd555ff6) The OpenSSF Package Analysis project identified 'ally-call-wait-time' @ 99.99.99 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: ally-call-wait-time

    Purl: pkg:npm/ally-call-wait-time

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.99
    MAL-2026-3297 | CVE-DB