MAL-2026-635

    Dashboard / Malicious Package / MAL-2026-635

    MAL-2026-635

    Published: 2 Feb 2026Last Modified: 19 Mar 2026

    Summary: Malicious code in finnairshop (npm)

    Details: Source: amazon-inspector (79d4d53f987d9f13e00e895d04155d3d28ea228eacb34a2f273667e520c5525f) The package finnairshop was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: finnairshop

    Purl: pkg:npm/finnairshop

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    100.0.10
    MAL-2026-635 | CVE-DB