MAL-2026-3394

    Dashboard / Malicious Package / MAL-2026-3394

    MAL-2026-3394

    Published: 8 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in @gaia-codesearch/gaia-api-typescript (npm)

    Details: Source: amazon-inspector (59cc0f371f067ea9c6f0bbe7076f9f33181d8e1ae55c43ff05ae2b854de41549) The package @gaia-codesearch/gaia-api-typescript was found to contain malicious code. Source: ossf-package-analysis (f96009564f8e7e51171ad83f7ac75822ab1b1492ab73b06b4596a0686418299f) The OpenSSF Package Analysis project identified '@gaia-codesearch/gaia-api-typescript' @ 0.0.5 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @gaia-codesearch/gaia-api-typescript

    Purl: pkg:npm/%40gaia-codesearch/gaia-api-typescript

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.0.5
    0.0.8
    MAL-2026-3394 | CVE-DB