MAL-2026-3410

    Dashboard / Malicious Package / MAL-2026-3410

    MAL-2026-3410

    Published: 10 May 2026Last Modified: 12 May 2026

    Summary: Malicious code in @miurba/alcazaba (npm)

    Details: Source: amazon-inspector (36c814274998998c89db63740c3d1032c8da3d6f6f9e44e100328c83e4ea29a0) The package @miurba/alcazaba was found to contain malicious code. Source: ossf-package-analysis (50365d8256527fa5afa757d8d15674e861bec80afcd6517d018e329f3e4fa93f) The OpenSSF Package Analysis project identified '@miurba/alcazaba' @ 99.99.99 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @miurba/alcazaba

    Purl: pkg:npm/%40miurba/alcazaba

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.99
    MAL-2026-3410 | CVE-DB