MAL-2026-1651

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ai-fast-auto-trader/MAL-2026-1651.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-1651
Published
2026-03-18T12:37:54Z
Modified
2026-04-16T15:52:09.877942Z
Summary
Malicious code in ai-fast-auto-trader (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (c8b2575eb64d69c961ae4e503747238d564d354049b7bdc75c814eceaa941fd5)

The package ai-fast-auto-trader was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "2.2.1",
                "2.2.2",
                "2.2.3",
                "2.2.4",
                "2.2.5",
                "2.2.6"
            ],
            "modified_time": "2026-03-18T12:37:54Z",
            "sha256": "4a58c3a368f0deb42912ce51d14037b42c141309ab8f2a9f08752b4117e83399",
            "id": "RLMA-2026-01099",
            "source": "reversing-labs",
            "import_time": "2026-03-19T12:18:32.82632463Z"
        },
        {
            "versions": [
                "2.2.1",
                "2.2.2",
                "2.2.3",
                "2.2.4",
                "2.2.5",
                "2.2.6"
            ],
            "modified_time": "2026-03-23T05:11:41Z",
            "sha256": "c8b2575eb64d69c961ae4e503747238d564d354049b7bdc75c814eceaa941fd5",
            "source": "amazon-inspector",
            "import_time": "2026-03-23T05:14:12.666482537Z"
        },
        {
            "modified_time": "2026-04-16T09:43:24Z",
            "sha256": "bf9d5c32dc170ac1e0c296b2e9370974f2ac96d6c65372bc4daeb3cd63c724b9",
            "id": "RLUA-2026-01884",
            "source": "reversing-labs",
            "import_time": "2026-04-16T15:39:25.408449944Z"
        }
    ]
}
References
Credits

Affected packages

npm / ai-fast-auto-trader

Package

Name
ai-fast-auto-trader
View open source insights on deps.dev
Purl
pkg:npm/ai-fast-auto-trader

Affected ranges

Affected versions

2.*
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ai-fast-auto-trader/MAL-2026-1651.json"