{"id":"MAL-2026-1816","summary":"Malicious code in pkgnewfefame1 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (784cb2a0a3df5c95ee2f3f5b348780d29ffa4e6d03263d5611531f0b6babe20e)\nThe package pkgnewfefame1 was found to contain malicious code.\n","modified":"2026-04-16T15:57:14.800846Z","published":"2026-03-18T13:03:54Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-01493","sha256":"5101b98ec1f550b43d291433172e441372a98f5d285afb7e156aed876c00aead","versions":["3.2.1"],"import_time":"2026-03-19T12:19:05.705873003Z","source":"reversing-labs","modified_time":"2026-03-18T13:03:54Z"},{"modified_time":"2026-03-23T05:11:41Z","sha256":"784cb2a0a3df5c95ee2f3f5b348780d29ffa4e6d03263d5611531f0b6babe20e","versions":["3.2.1"],"import_time":"2026-03-23T05:14:05.623673149Z","source":"amazon-inspector"},{"id":"RLUA-2026-02025","sha256":"0f12e8b5223e452cce3d4c13dd04204507b4c5b8d445058c5fb32a67959cbe88","modified_time":"2026-04-16T10:11:24Z","import_time":"2026-04-16T15:39:32.377692376Z","source":"reversing-labs"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/npm-fake-install-logs-rat"}],"affected":[{"package":{"name":"pkgnewfefame1","ecosystem":"npm","purl":"pkg:npm/pkgnewfefame1"},"versions":["3.2.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/pkgnewfefame1/MAL-2026-1816.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}