MAL-2026-500

    Dashboard / Malicious Package / MAL-2026-500

    MAL-2026-500

    Published: 25 Jan 2026Last Modified: 2 Feb 2026

    Summary: Malicious code in zabittest11 (npm)

    Details: Source: amazon-inspector (08a0084877b46812f2b43eaa232ecb1768d4b4415111ee65c741f2cc7acfa784) The package zabittest11 was found to contain malicious code. Source: ossf-package-analysis (3599364ab8220ed1b88dd539b35b7f8e94d8d124030b13fc98b5e0daa7657032) The OpenSSF Package Analysis project identified 'zabittest11' @ 1.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: zabittest11

    Purl: pkg:npm/zabittest11

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1
    MAL-2026-500 | CVE-DB