MAL-2026-1706

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ddddddd1d/MAL-2026-1706.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-1706
Published
2026-03-18T12:46:12Z
Modified
2026-03-23T05:41:45.776216Z
Summary
Malicious code in ddddddd1d (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (2b26bb490eddaee9c3130c572772252e4959e395be8f786d04e125aed7f6c9da)

The package ddddddd1d was found to contain malicious code.

Database specific
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2026-01238",
            "sha256": "d71ee6cec2b26384c338e49483c8f011ef7ad32b03deae100582c6ed978cdeb0",
            "import_time": "2026-03-19T12:18:44.905743857Z",
            "source": "reversing-labs",
            "modified_time": "2026-03-18T12:46:12Z",
            "versions": [
                "1.0.0",
                "1.0.1",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5",
                "1.0.6",
                "1.0.7",
                "1.0.8",
                "1.0.9",
                "1.0.10",
                "1.0.11",
                "1.0.12",
                "1.0.13",
                "1.0.14",
                "1.0.15",
                "1.0.17",
                "1.0.18",
                "1.0.19",
                "1.0.22",
                "1.0.23",
                "1.0.24",
                "1.0.25",
                "1.0.26",
                "1.0.27",
                "1.0.28",
                "1.0.29",
                "1.0.30",
                "1.0.31",
                "1.0.32",
                "1.0.33",
                "1.0.34",
                "1.0.35",
                "1.0.36",
                "1.0.37",
                "1.0.38",
                "1.0.39",
                "1.0.40",
                "1.0.41",
                "1.0.42",
                "1.0.43",
                "1.0.44",
                "1.0.45",
                "1.0.46",
                "1.0.47",
                "1.0.48",
                "1.0.49",
                "1.0.50",
                "1.0.51",
                "1.0.52",
                "1.0.53",
                "1.0.54",
                "1.0.55",
                "1.0.56",
                "1.0.57",
                "1.0.58",
                "1.0.59",
                "1.0.60",
                "1.0.61",
                "1.0.62",
                "1.0.64",
                "1.0.65",
                "1.0.66",
                "1.0.67",
                "1.0.68",
                "1.0.69",
                "1.0.70",
                "1.0.71",
                "1.0.72",
                "1.0.73",
                "1.0.74",
                "1.0.75",
                "1.0.76"
            ]
        },
        {
            "import_time": "2026-03-23T05:14:26.612398721Z",
            "sha256": "2b26bb490eddaee9c3130c572772252e4959e395be8f786d04e125aed7f6c9da",
            "source": "amazon-inspector",
            "modified_time": "2026-03-23T05:11:41Z",
            "versions": [
                "1.0.0",
                "1.0.1",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5",
                "1.0.6",
                "1.0.7",
                "1.0.8",
                "1.0.9",
                "1.0.10",
                "1.0.11",
                "1.0.12",
                "1.0.13",
                "1.0.14",
                "1.0.15",
                "1.0.17",
                "1.0.18",
                "1.0.19",
                "1.0.22",
                "1.0.23",
                "1.0.24",
                "1.0.25",
                "1.0.26",
                "1.0.27",
                "1.0.28",
                "1.0.29",
                "1.0.30",
                "1.0.31",
                "1.0.32",
                "1.0.33",
                "1.0.34",
                "1.0.35",
                "1.0.36",
                "1.0.37",
                "1.0.38",
                "1.0.39",
                "1.0.40",
                "1.0.41",
                "1.0.42",
                "1.0.43",
                "1.0.44",
                "1.0.45",
                "1.0.46",
                "1.0.47",
                "1.0.48",
                "1.0.49",
                "1.0.50",
                "1.0.51",
                "1.0.52",
                "1.0.53",
                "1.0.54",
                "1.0.55",
                "1.0.56",
                "1.0.57",
                "1.0.58",
                "1.0.59",
                "1.0.60",
                "1.0.61",
                "1.0.62",
                "1.0.64",
                "1.0.65",
                "1.0.66",
                "1.0.67",
                "1.0.68",
                "1.0.69",
                "1.0.70",
                "1.0.71",
                "1.0.72",
                "1.0.73",
                "1.0.74",
                "1.0.75",
                "1.0.76"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / ddddddd1d

Package

Affected ranges

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.17
1.0.18
1.0.19
1.0.22
1.0.23
1.0.24
1.0.25
1.0.26
1.0.27
1.0.28
1.0.29
1.0.30
1.0.31
1.0.32
1.0.33
1.0.34
1.0.35
1.0.36
1.0.37
1.0.38
1.0.39
1.0.40
1.0.41
1.0.42
1.0.43
1.0.44
1.0.45
1.0.46
1.0.47
1.0.48
1.0.49
1.0.50
1.0.51
1.0.52
1.0.53
1.0.54
1.0.55
1.0.56
1.0.57
1.0.58
1.0.59
1.0.60
1.0.61
1.0.62
1.0.64
1.0.65
1.0.66
1.0.67
1.0.68
1.0.69
1.0.70
1.0.71
1.0.72
1.0.73
1.0.74
1.0.75
1.0.76

Database specific

source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ddddddd1d/MAL-2026-1706.json"