{"id":"MAL-2026-1042","summary":"Malicious code in trae-browser-inspect (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2fbd2b8603f95aa744b92e1f624c31c4afc4dcb7ef634096a331302462b45e1f)\nThe package trae-browser-inspect was found to contain malicious code.\n\n## Source: ossf-package-analysis (fd5bf396be565b12f9c16a91a3d228cd650efde38a6ebf3b6656837d19adfdbb)\nThe OpenSSF Package Analysis project identified 'trae-browser-inspect' @ 9.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2026-03-01T21:00:28.859092Z","published":"2026-02-25T03:30:34Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2026-02-25T03:30:34Z","sha256":"fd5bf396be565b12f9c16a91a3d228cd650efde38a6ebf3b6656837d19adfdbb","source":"ossf-package-analysis","versions":["9.9.9"],"import_time":"2026-02-26T01:37:59.870438665Z"},{"import_time":"2026-03-01T20:41:57.708452584Z","modified_time":"2026-03-01T20:25:57Z","sha256":"2fbd2b8603f95aa744b92e1f624c31c4afc4dcb7ef634096a331302462b45e1f","source":"amazon-inspector","versions":["9.9.9"]}]},"affected":[{"package":{"name":"trae-browser-inspect","ecosystem":"npm","purl":"pkg:npm/trae-browser-inspect"},"versions":["9.9.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/trae-browser-inspect/MAL-2026-1042.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}