MAL-2026-981

    Dashboard / Malicious Package / MAL-2026-981

    MAL-2026-981

    Published: 22 Feb 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in dt-fe-t2d-marketplace (npm)

    Details: Source: amazon-inspector (48922e442917f5a5e22fd0e0bf4261cc99445547cfe91bfb017bc2443c2203ec) The package dt-fe-t2d-marketplace was found to contain malicious code. Source: ossf-package-analysis (6fcbd07cbb3a65261070a5447c8e60c41f50bdabc3d075858ca6a16fcca7246d) The OpenSSF Package Analysis project identified 'dt-fe-t2d-marketplace' @ 71.0.2 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: dt-fe-t2d-marketplace

    Purl: pkg:npm/dt-fe-t2d-marketplace

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    71.0.2