{"id":"MAL-2026-1694","summary":"Malicious code in collabs-merchants (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58)\nThe package collabs-merchants was found to contain malicious code.\n","modified":"2026-03-23T05:41:12.201978Z","published":"2026-03-18T12:44:23Z","database_specific":{"malicious-packages-origins":[{"sha256":"41c135da22c5a2ba1852f900d088989719fbd5af812b32f8ed4e4b59368f84b3","source":"reversing-labs","versions":["99.9.12","99.9.13","99.9.14"],"id":"RLMA-2026-01212","import_time":"2026-03-19T12:18:42.770188755Z","modified_time":"2026-03-18T12:44:23Z"},{"modified_time":"2026-03-23T05:11:41Z","sha256":"c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58","source":"amazon-inspector","versions":["99.9.12","99.9.13","99.9.14"],"import_time":"2026-03-23T05:14:21.271494062Z"}]},"affected":[{"package":{"name":"collabs-merchants","ecosystem":"npm","purl":"pkg:npm/collabs-merchants"},"versions":["99.9.12","99.9.13","99.9.14"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/collabs-merchants/MAL-2026-1694.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}