MAL-2026-1848

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sky-enablement/MAL-2026-1848.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-1848
Published
2026-03-18T13:09:42Z
Modified
2026-03-23T05:45:45.764169Z
Summary
Malicious code in sky-enablement (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9712856e1dd6e76d395507a76c21d01a945d4e5490e0d747384212a4a8b7c6df)

The package sky-enablement was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "a1dcdf950f95fd03b5da9abc9d796cc0c4a704470f9c258e960ab539a270911e",
            "id": "RLMA-2026-01575",
            "source": "reversing-labs",
            "modified_time": "2026-03-18T13:09:42Z",
            "versions": [
                "2.1.0"
            ],
            "import_time": "2026-03-19T12:19:10.684511867Z"
        },
        {
            "sha256": "9712856e1dd6e76d395507a76c21d01a945d4e5490e0d747384212a4a8b7c6df",
            "import_time": "2026-03-23T05:14:00.865175115Z",
            "source": "amazon-inspector",
            "modified_time": "2026-03-23T05:11:41Z",
            "versions": [
                "2.1.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / sky-enablement

Package

Name
sky-enablement
View open source insights on deps.dev
Purl
pkg:npm/sky-enablement

Affected ranges

Affected versions

2.*
2.1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sky-enablement/MAL-2026-1848.json"