MAL-2026-3302

    Dashboard / Malicious Package / MAL-2026-3302

    MAL-2026-3302

    Published: 3 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in ally-starter-api (npm)

    Details: Source: amazon-inspector (ac9875cbfe312bac49b96d321664e13d98ff6214d38db1d0b3339500a83204cc) The package ally-starter-api was found to contain malicious code. Source: ossf-package-analysis (5479f46a56fc6576f3486d501685cddf5fe063c0acace5fbd2706cab928cde7d) The OpenSSF Package Analysis project identified 'ally-starter-api' @ 99.99.99 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: ally-starter-api

    Purl: pkg:npm/ally-starter-api

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.99
    MAL-2026-3302 | CVE-DB