MAL-2026-5122

    Dashboard / Malicious Package / MAL-2026-5122

    MAL-2026-5122

    Published: 1 Jun 2026Last Modified: 1 Jun 2026

    Summary: Malicious code in picnic-react-mise-en-place (npm)

    Details: Source: ossf-package-analysis (d57f4579f4e0842567d9e59bfa74af355f457cbfdfeabe0f65a9e6952f79aa34) The OpenSSF Package Analysis project identified 'picnic-react-mise-en-place' @ 9999.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: picnic-react-mise-en-place

    Purl: pkg:npm/picnic-react-mise-en-place

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    9999.0.0