MAL-2026-3030

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/model-poc-suhail/MAL-2026-3030.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-3030

Published

2026-04-24T15:35:46Z

Modified

2026-04-24T21:32:50.256725Z

Summary

Malicious code in model-poc-suhail (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (cab4accb7cb3b74a34df44b1ed7fa1e62726ff3e5ee8fb562dd0d65754dc61b7)

The OpenSSF Package Analysis project identified 'model-poc-suhail' @ 1.0.5 (npm) as malicious.

It is considered malicious because:

The package communicates with a domain associated with malicious activity.

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "cab4accb7cb3b74a34df44b1ed7fa1e62726ff3e5ee8fb562dd0d65754dc61b7",
            "modified_time": "2026-04-24T15:41:05Z",
            "source": "ossf-package-analysis",
            "import_time": "2026-04-24T15:57:24.067198042Z",
            "versions": [
                "1.0.5"
            ]
        },
        {
            "sha256": "ecf450cd351c9f286061d8f191775dace36b71de22f106431e243bb7b03a8fc9",
            "modified_time": "2026-04-24T15:35:46Z",
            "source": "ossf-package-analysis",
            "import_time": "2026-04-24T15:57:23.932504498Z",
            "versions": [
                "1.0.4"
            ]
        },
        {
            "sha256": "9b067f8988092b4bb6bfc9eaa2c0ccbb07c138292472b678c06bfbfb41859269",
            "modified_time": "2026-04-24T21:13:34Z",
            "source": "ossf-package-analysis",
            "import_time": "2026-04-24T21:21:00.746579063Z",
            "versions": [
                "1.0.9"
            ]
        }
    ]
}

References

Credits

- OpenSSF: Package Analysis - FINDER
- - https://github.com/ossf/package-analysis
  - https://openssf.slack.com/channels/package_analysis

Affected packages

npm / model-poc-suhail

Package

Name: model-poc-suhail; View open source insights on deps.dev
Purl: pkg:npm/model-poc-suhail

Affected ranges

Affected versions

1.*

1.0.4

1.0.5

1.0.9

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/model-poc-suhail/MAL-2026-3030.json"