MAL-2026-3308

    Dashboard / Malicious Package / MAL-2026-3308

    MAL-2026-3308

    Published: 1 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in common-roles (npm)

    Details: Source: amazon-inspector (f602ee3e4db38c8befaab761a5f06c83f1a48c33822478a3ae25e315fcd337a2) The package common-roles was found to contain malicious code. Source: ossf-package-analysis (aec58e59cdd165705f080c8c63baf85d77c4f3b0bc9d1b781695cad976943df0) The OpenSSF Package Analysis project identified 'common-roles' @ 99.1.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: common-roles

    Purl: pkg:npm/common-roles

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.1.0
    MAL-2026-3308 | CVE-DB