{"id":"MAL-2026-17748","summary":"Malicious code in test-account-portal-fe (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (5dd02103458df4faa2c37da43a76a468a0a22d591fb77c5d756e7d7496d68907)\nThe OpenSSF Package Analysis project identified 'test-account-portal-fe' @ 100.100.102 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2026-10-09T19:30:05.230065194Z","published":"2026-10-09T19:10:36Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-10-09T19:15:19.362264369Z","modified_time":"2026-10-09T19:10:36Z","sha256":"5dd02103458df4faa2c37da43a76a468a0a22d591fb77c5d756e7d7496d68907","source":"ossf-package-analysis","versions":["100.100.102"]}]},"affected":[{"package":{"name":"test-account-portal-fe","ecosystem":"npm","purl":"pkg:npm/test-account-portal-fe"},"versions":["100.100.102"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/test-account-portal-fe/MAL-2026-17748.json"}}],"schema_version":"1.9.0","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}