{"id":"MAL-2026-2375","summary":"Malicious code in nf-console (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7)\nThe package nf-console was found to contain malicious code.\n","modified":"2026-04-07T14:54:45.131775Z","published":"2026-03-24T15:53:11Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","import_time":"2026-04-01T12:26:09.89972713Z","sha256":"1dabd14072698feed30c1ab0d99fc4dc507a829c781747d3e6cd87b2e4646367","id":"RLMA-2026-01792","versions":["99.0.0","99.0.1"],"modified_time":"2026-03-24T15:53:11Z"},{"source":"amazon-inspector","sha256":"8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7","import_time":"2026-04-07T14:39:19.492844319Z","versions":["99.0.0","99.0.1"],"modified_time":"2026-04-07T14:24:50Z"}]},"affected":[{"package":{"name":"nf-console","ecosystem":"npm","purl":"pkg:npm/nf-console"},"versions":["99.0.0","99.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nf-console/MAL-2026-2375.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}