MAL-2026-3328

    Dashboard / Malicious Package / MAL-2026-3328

    MAL-2026-3328

    Published: 4 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in pocpoc2626 (npm)

    Details: Source: amazon-inspector (4a43e5357592b2bbbe0c68be3960ac829ab988a15b57d63df5ab954c9d0b5b09) The package pocpoc2626 was found to contain malicious code. Source: ossf-package-analysis (0176ec0fde390432553ec3dffa91438e5e923d23549ef4b836bc91de5259a21d) The OpenSSF Package Analysis project identified 'pocpoc2626' @ 99.99.9998 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: pocpoc2626

    Purl: pkg:npm/pocpoc2626

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.9998
    MAL-2026-3328 | CVE-DB