{"id":"MAL-2026-1768","summary":"Malicious code in legacy-shared-frontend (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (e0bdad0c7ae6723e92b1d0bc357ec0ed147ccb057cba4fc6cff4a2a26d7cc967)\nThe package legacy-shared-frontend was found to contain malicious code.\n","modified":"2026-03-23T05:43:30.852731Z","published":"2026-03-18T12:57:11Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-01398","import_time":"2026-03-19T12:18:58.516426374Z","modified_time":"2026-03-18T12:57:11Z","sha256":"e8507a73cce0bbb77cb7a9692e550619a6949cbeea0fe8fb6f94315cf48d51c7","source":"reversing-labs","versions":["100.0.0"]},{"sha256":"e0bdad0c7ae6723e92b1d0bc357ec0ed147ccb057cba4fc6cff4a2a26d7cc967","source":"amazon-inspector","versions":["100.0.0"],"import_time":"2026-03-23T05:14:05.443004192Z","modified_time":"2026-03-23T05:11:41Z"}]},"affected":[{"package":{"name":"legacy-shared-frontend","ecosystem":"npm","purl":"pkg:npm/legacy-shared-frontend"},"versions":["100.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/legacy-shared-frontend/MAL-2026-1768.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}