MAL-2026-2375

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nf-console/MAL-2026-2375.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-2375
Published
2026-03-24T15:53:11Z
Modified
2026-04-07T14:54:45.131775Z
Summary
Malicious code in nf-console (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7)

The package nf-console was found to contain malicious code.

Database specific
{
    "malicious-packages-origins": [
        {
            "modified_time": "2026-03-24T15:53:11Z",
            "versions": [
                "99.0.0",
                "99.0.1"
            ],
            "sha256": "1dabd14072698feed30c1ab0d99fc4dc507a829c781747d3e6cd87b2e4646367",
            "id": "RLMA-2026-01792",
            "source": "reversing-labs",
            "import_time": "2026-04-01T12:26:09.89972713Z"
        },
        {
            "modified_time": "2026-04-07T14:24:50Z",
            "versions": [
                "99.0.0",
                "99.0.1"
            ],
            "sha256": "8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7",
            "source": "amazon-inspector",
            "import_time": "2026-04-07T14:39:19.492844319Z"
        }
    ]
}
References
Credits

Affected packages

npm / nf-console

Package

Affected ranges

Affected versions

99.*
99.0.0
99.0.1

Database specific

source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nf-console/MAL-2026-2375.json"