MAL-2026-3338

    Dashboard / Malicious Package / MAL-2026-3338

    MAL-2026-3338

    Published: 4 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in ms.analytics-web (npm)

    Details: Source: amazon-inspector (f8603a11b43db05d179ab55b635a517ed40832c05fc4365a1ba69d2ec1eb5092) The package ms.analytics-web was found to contain malicious code. Source: ossf-package-analysis (35249931468fd68291141567ae436b4220f12fa0498d330bfc75ee82c772c1e7) The OpenSSF Package Analysis project identified 'ms.analytics-web' @ 99.9.13 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: ms.analytics-web

    Purl: pkg:npm/ms.analytics-web

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.9.13
    MAL-2026-3338 | CVE-DB