MAL-2026-7314

    Dashboard / Malicious Package / MAL-2026-7314

    MAL-2026-7314

    Published: 7 Jul 2026Last Modified: 1 Sept 2026Aliases: 
    GHSA-qxfw-2vwr-x4mp

    Summary: Malicious code in logfuse (npm)

    Details: Source: amazon-inspector (259fc8b205e41dea32af006c7eaa325f0d1cca2421c668b778b8d2559d8ec900) The package was found to contain malicious code or consuming dependency that contains malicious code

    References: https://www.npmjs.com/package/logfuse/v/2.1.6, https://github.com/advisories/GHSA-qxfw-2vwr-x4mp

    Affected packages

    Package

    Name: logfuse

    Purl: pkg:npm/logfuse

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.1.6