{"id":"MAL-2026-2329","summary":"Malicious code in @abi-labs-frontend/standards (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a60eba79d2fd49b58fb2a2073d2b7c87f66c1ad781bc1a6137962f9b5e772449)\nThe package @abi-labs-frontend/standards was found to contain malicious code.\n","aliases":["GHSA-hqxv-wmmr-v5h3"],"modified":"2026-09-01T11:30:40.883501124Z","published":"2026-03-24T15:23:58Z","database_specific":{"malicious-packages-origins":[{"versions":["9.99.15"],"id":"RLMA-2026-01693","import_time":"2026-04-01T12:26:06.156987196Z","modified_time":"2026-03-24T15:23:58Z","sha256":"8d91fb32cbc15015cc7ab17e9f318d1c2b14e711838b3c609ffc0d2a3b457f88","source":"reversing-labs"},{"import_time":"2026-04-07T14:39:19.76083154Z","modified_time":"2026-04-07T14:24:50Z","sha256":"a60eba79d2fd49b58fb2a2073d2b7c87f66c1ad781bc1a6137962f9b5e772449","source":"amazon-inspector","versions":["9.99.15"]},{"modified_time":"2026-08-24T16:16:45Z","sha256":"d3a2fae0ac1b421bbcdcdc9ed4ce7cab7f24a1c8454c4ad393607c56afded5c9","source":"reversing-labs","id":"RLUA-2026-05790","import_time":"2026-09-01T11:17:36.993365884Z"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-hqxv-wmmr-v5h3"}],"affected":[{"package":{"name":"@abi-labs-frontend/standards","ecosystem":"npm","purl":"pkg:npm/%40abi-labs-frontend/standards"},"versions":["9.99.15"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@abi-labs-frontend/standards/MAL-2026-2329.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}