{"id":"MAL-2026-1821","summary":"Malicious code in portal-lime (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a61d5bfbd22f203a4a68f3329504312a967221d510ce7ceed02c663b0de8e002)\nThe package portal-lime was found to contain malicious code.\n","modified":"2026-03-23T05:45:01.331146Z","published":"2026-03-18T13:04:20Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-03-19T12:19:06.438487022Z","modified_time":"2026-03-18T13:04:20Z","sha256":"94381de623a657a017a0aad90e1c1b94f136b9eaa164e3a6f743263944139dd4","source":"reversing-labs","versions":["2.1.3"],"id":"RLMA-2026-01501"},{"versions":["2.1.3"],"import_time":"2026-03-23T05:14:27.146895349Z","modified_time":"2026-03-23T05:11:41Z","sha256":"a61d5bfbd22f203a4a68f3329504312a967221d510ce7ceed02c663b0de8e002","source":"amazon-inspector"}]},"affected":[{"package":{"name":"portal-lime","ecosystem":"npm","purl":"pkg:npm/portal-lime"},"versions":["2.1.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/portal-lime/MAL-2026-1821.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}