{"id":"MAL-2026-2398","summary":"Malicious code in xrpl-hooks-ide (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (0cba4a53598147b0ea4a05d573906166d018f6026d4b245512f651c235c2bae3)\nThe package xrpl-hooks-ide was found to contain malicious code.\n","modified":"2026-04-07T14:50:28.200517Z","published":"2026-03-24T16:04:59Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-04-01T12:26:11.876354711Z","source":"reversing-labs","versions":["1.0.0"],"id":"RLMA-2026-01840","modified_time":"2026-03-24T16:04:59Z","sha256":"de04840b32424600089f60a021be4dafabcd956d7c1ce5455e1100ff11a88767"},{"import_time":"2026-04-07T14:39:15.076510972Z","source":"amazon-inspector","versions":["1.0.0"],"modified_time":"2026-04-07T14:24:50Z","sha256":"0cba4a53598147b0ea4a05d573906166d018f6026d4b245512f651c235c2bae3"}]},"affected":[{"package":{"name":"xrpl-hooks-ide","ecosystem":"npm","purl":"pkg:npm/xrpl-hooks-ide"},"versions":["1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/xrpl-hooks-ide/MAL-2026-2398.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}