MAL-2026-836

    Dashboard / Malicious Package / MAL-2026-836

    MAL-2026-836

    Published: 10 Feb 2026Last Modified: 23 Feb 2026

    Summary: Malicious code in myads-layout (npm)

    Details: Source: amazon-inspector (8d196800be4de842ce4eb526181a86b7d78e5e3851954256a68d9cda3dab4a89) The package myads-layout was found to contain malicious code. Source: ossf-package-analysis (daaebe7963626ff1bbd9c1182c246f9c508f6f3b7add576234dc5b4651276b24) The OpenSSF Package Analysis project identified 'myads-layout' @ 6.5.5 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: myads-layout

    Purl: pkg:npm/myads-layout

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    6.5.5
    MAL-2026-836 | CVE-DB