{"id":"MAL-2026-246","summary":"Malicious code in admin1001 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c67e1e1483632e97bcfb216cd6ac37d5870178c8de00848a7a6de4df461951b4)\nThe package admin1001 was found to contain malicious code.\n\n## Source: ghsa-malware (2e19c4af31e55eea3be82d478468774b271484b0c7a8ba0078ad55fd8995ba91)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n\n## Source: ossf-package-analysis (02510e627feb40d3ad03a54d1e09d11247df5d9dd6e0160403170e01f3af86b5)\nThe OpenSSF Package Analysis project identified 'admin1001' @ 4.3.100 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["GHSA-j48w-xpqc-jv3w"],"modified":"2026-01-16T04:11:19.596986Z","published":"2026-01-13T15:31:00Z","database_specific":{"malicious-packages-origins":[{"sha256":"af6a4ce1a22f67fd9a970fad48a4dce0fca8cdb95dedd31c04b2301b7ccfebb6","import_time":"2026-01-13T15:41:32.58288801Z","source":"ossf-package-analysis","versions":["3.0.4"],"modified_time":"2026-01-13T15:31:00Z"},{"sha256":"514a5b9c51f0171cc91685f10794537ff9b73ef4abf1b3c693eb20fc071aecca","import_time":"2026-01-13T16:09:52.261971236Z","source":"ossf-package-analysis","versions":["4.0.2"],"modified_time":"2026-01-13T16:06:06Z"},{"sha256":"ea5543ba052d2df4b349954789e767c7473ca89ae19d619612fd1e1338dc4bd5","import_time":"2026-01-13T16:45:46.811042457Z","source":"ossf-package-analysis","versions":["4.0.4"],"modified_time":"2026-01-13T16:45:28Z"},{"sha256":"7e95b379bb90da7b7938edeaed6eea52fbdb9f004cef0471af9905eb355ce52b","import_time":"2026-01-13T17:10:45.123492247Z","source":"ossf-package-analysis","versions":["4.0.6"],"modified_time":"2026-01-13T16:55:49Z"},{"import_time":"2026-01-13T17:10:45.037482Z","sha256":"d19f8508f323e01189aa22da892d9be745b4e6f21fa149036d12f06346f7a002","source":"ossf-package-analysis","versions":["4.0.5"],"modified_time":"2026-01-13T16:50:32Z"},{"import_time":"2026-01-13T17:42:44.259310452Z","sha256":"35b3f0d00f3cc1103661a404b8b50fa86738a97591ccd632365c8756cb334d11","source":"ossf-package-analysis","versions":["4.1.3"],"modified_time":"2026-01-13T17:35:49Z"},{"import_time":"2026-01-13T18:10:57.548395944Z","sha256":"a88c8ffcfb80fbf7776e384dd5160f2fa883ff4bc1fade5a0be0738877fc62b7","source":"ossf-package-analysis","versions":["4.1.5"],"modified_time":"2026-01-13T17:45:08Z"},{"sha256":"6e10c41e22acc54678ad1ca62c06d530c000bc00a4756a99e5cc3b7ce6f643d7","import_time":"2026-01-13T18:10:57.632066885Z","source":"ossf-package-analysis","versions":["4.1.7"],"modified_time":"2026-01-13T17:45:43Z"},{"import_time":"2026-01-13T19:07:21.659497018Z","sha256":"23544e2296e71abe4f1ea1f8c5ec87ae91b6ce2e87d9c3623c163b173b5f3f16","source":"ossf-package-analysis","versions":["4.2.1"],"modified_time":"2026-01-13T18:50:44Z"},{"import_time":"2026-01-13T19:07:21.744374009Z","sha256":"41e62a3e4bbf5015fd461df0f47168f97ef29ec0d6ac29616e90e50e7e048537","source":"ossf-package-analysis","versions":["4.2.2"],"modified_time":"2026-01-13T19:00:28Z"},{"import_time":"2026-01-13T19:07:21.571199963Z","sha256":"a73c84aa5ec6199655d8571fc573f47b71f313343ae88f8c7f83fccb9ae9161a","source":"ossf-package-analysis","versions":["4.2.0"],"modified_time":"2026-01-13T18:45:43Z"},{"import_time":"2026-01-14T12:12:01.582884361Z","sha256":"1e1d5f83f67308d38d00b634d936ce51d337f14ca3b23c7d5790781d8086e038","source":"ossf-package-analysis","versions":["4.3.4"],"modified_time":"2026-01-14T11:50:38Z"},{"sha256":"61ed46f682c8a67951947d6bc903aa21d98a43e5efa3c3bb7d1639ff4f182848","import_time":"2026-01-14T12:12:01.883003234Z","source":"ossf-package-analysis","versions":["4.3.11"],"modified_time":"2026-01-14T12:10:54Z"},{"sha256":"6d11740f40614c2b7ec3c79d6e74337e21aa9b715614618dbb7981d9086dfa62","import_time":"2026-01-14T12:12:01.82432564Z","source":"ossf-package-analysis","versions":["4.3.9"],"modified_time":"2026-01-14T12:05:44Z"},{"import_time":"2026-01-14T12:12:01.664297226Z","sha256":"95be60569016433ef6185369cd2c8f48732e9922a93874fa391f0703f8b40ea0","source":"ossf-package-analysis","versions":["4.3.7"],"modified_time":"2026-01-14T12:01:05Z"},{"sha256":"8f877dee83b84ed9795c341514b9b70495902605a3c8c042b8eb8608376e296a","import_time":"2026-01-14T12:48:24.942846466Z","source":"ossf-package-analysis","versions":["4.3.22"],"modified_time":"2026-01-14T12:35:30Z"},{"import_time":"2026-01-14T12:48:24.523053399Z","sha256":"90c772670bfeb9a7cbcece5916d560414c6977e9919db34680e33e906cef74cf","source":"ossf-package-analysis","versions":["4.3.14"],"modified_time":"2026-01-14T12:21:14Z"},{"sha256":"c096c577500f4c3ec0a9361add6cca67b9d4bd9ccde64dfb7e8f6360651e3057","import_time":"2026-01-14T12:48:25.055823077Z","source":"ossf-package-analysis","versions":["4.3.23"],"modified_time":"2026-01-14T12:40:37Z"},{"sha256":"c5d307cd84d0edcca70e3fb54411edebc9468c2167b10df5d1963817bd09f69a","import_time":"2026-01-14T12:48:24.65363866Z","source":"ossf-package-analysis","versions":["4.3.16"],"modified_time":"2026-01-14T12:25:50Z"},{"import_time":"2026-01-14T12:48:24.772649979Z","sha256":"29edf999fe3c0317fc9096a43f0a53ad3dca60d5be7ac4650e474f8cb586462d","source":"ossf-package-analysis","versions":["4.3.19"],"modified_time":"2026-01-14T12:30:57Z"},{"sha256":"2aaf1cdecdc73845cc2bcd3390997cfed4ef1bf95da10a3339ec280d35b99485","import_time":"2026-01-14T12:48:24.366667627Z","source":"ossf-package-analysis","versions":["4.3.13"],"modified_time":"2026-01-14T12:17:50Z"},{"import_time":"2026-01-14T13:19:50.561693646Z","sha256":"4a980a128c0fbdb522463d842ae39ae3bade32b44f823214ab5dfc4dcecef03b","source":"ossf-package-analysis","versions":["4.3.31"],"modified_time":"2026-01-14T13:01:13Z"},{"sha256":"c905a84ac088ce9eb34e81a66f4da20641e0ed985586d458f5c10789031e817b","import_time":"2026-01-14T13:19:50.641070804Z","source":"ossf-package-analysis","versions":["4.3.34"],"modified_time":"2026-01-14T13:07:16Z"},{"sha256":"46632eeba7a7fd4752f9e88aa1e672a7d191c1ac67fa6280a23d63cf6d24091d","import_time":"2026-01-14T13:19:50.751981032Z","source":"ossf-package-analysis","versions":["4.3.36"],"modified_time":"2026-01-14T13:16:28Z"},{"sha256":"eb66470879240d3085d2154354eff68aeea5cfeedad4e62fa37f1680522c4ff8","import_time":"2026-01-14T13:46:36.432986394Z","source":"ossf-package-analysis","versions":["4.3.43"],"modified_time":"2026-01-14T13:35:34Z"},{"sha256":"fc2b817c0ef7c31e4a20673a2dc681d120884a60e40368fb19221d44b54de39e","import_time":"2026-01-14T13:46:36.568101816Z","source":"ossf-package-analysis","versions":["4.3.48"],"modified_time":"2026-01-14T13:45:34Z"},{"sha256":"00d30067ed66fb7e6196943a450d245a67fbb8a81c40da5ad2f76e292e7b9bfd","import_time":"2026-01-14T13:46:36.340022354Z","source":"ossf-package-analysis","versions":["4.3.41"],"modified_time":"2026-01-14T13:30:51Z"},{"sha256":"a002dba48736c3c5cd06b00f48436aabdb14b32af3cbf26c4412f4da183c2e54","import_time":"2026-01-14T13:46:36.511717116Z","source":"ossf-package-analysis","versions":["4.3.46"],"modified_time":"2026-01-14T13:40:58Z"},{"sha256":"e9ec9f11bf94516bbacb0cce408daff6ca2e7e5ba91b88543d7a4fd46b42f2a4","import_time":"2026-01-14T13:46:36.265959065Z","source":"ossf-package-analysis","versions":["4.3.35"],"modified_time":"2026-01-14T13:22:47Z"},{"import_time":"2026-01-14T14:09:20.893286637Z","sha256":"a3973a52bf06fb176b73544aa9c59377c40a914b1b1fe772e6d762cc2c7963f7","source":"ossf-package-analysis","versions":["4.3.49"],"modified_time":"2026-01-14T13:50:49Z"},{"sha256":"e929118e07e2e3a6d5bbc98939b5901fa23b1094c4d653119b617933f39ff8ca","import_time":"2026-01-14T14:09:20.956200432Z","source":"ossf-package-analysis","versions":["4.3.51"],"modified_time":"2026-01-14T13:59:08Z"},{"sha256":"081374269529e6f454abf7a14c7e985861c757ae7f3e643d2699295d736cdf67","import_time":"2026-01-14T14:42:45.982021975Z","source":"ossf-package-analysis","versions":["4.3.57"],"modified_time":"2026-01-14T14:36:55Z"},{"import_time":"2026-01-14T14:42:45.829692527Z","sha256":"744cd0156d221ee89c1921edcaaf28d9811462104cda0f64744bf77fcdc72f54","source":"ossf-package-analysis","versions":["4.3.56"],"modified_time":"2026-01-14T14:30:32Z"},{"sha256":"b8386ac85ff7ea527176f562a05456e7d243f4dc0ecb57a7a3a8bc12c11b816c","import_time":"2026-01-14T14:42:46.1498603Z","source":"ossf-package-analysis","versions":["4.3.58"],"modified_time":"2026-01-14T14:40:33Z"},{"import_time":"2026-01-14T15:09:04.95782983Z","sha256":"124cdcb0004de1eafa95d827ef26a9a75c29ba11e5c4430f7a2e1bb694725271","source":"ossf-package-analysis","versions":["4.3.59"],"modified_time":"2026-01-14T15:00:05Z"},{"sha256":"7e58a4fe697504b99c75def7300e929484f6dd73303482b85e0bd290293a95ab","import_time":"2026-01-14T15:40:03.785735768Z","source":"ossf-package-analysis","versions":["4.3.66"],"modified_time":"2026-01-14T15:25:50Z"},{"sha256":"17652d50438bfecd2628f200b001d00223c9ecc812f9172f46fa43eedf95c14c","import_time":"2026-01-14T15:40:03.59450198Z","source":"ossf-package-analysis","versions":["4.3.65"],"modified_time":"2026-01-14T15:11:01Z"},{"sha256":"67a8c4fa174ac1e672a13c22a71901310b8df1bea60b774e5b6ea88dfa2144c1","import_time":"2026-01-14T15:40:03.716649559Z","source":"ossf-package-analysis","versions":["4.3.67"],"modified_time":"2026-01-14T15:21:46Z"},{"sha256":"98bab1d4a7718e5851466cea33c86b0642198dcac31f3b85dcb6b20dd9d6f8db","import_time":"2026-01-14T17:10:50.416650169Z","source":"ossf-package-analysis","versions":["4.3.73"],"modified_time":"2026-01-14T16:50:59Z"},{"sha256":"220b1c9eb8b3ae26e4aef21453af04692b1cf937dc6951d468db8d3131c0edf8","import_time":"2026-01-14T17:42:40.053089148Z","source":"ossf-package-analysis","versions":["4.3.77"],"modified_time":"2026-01-14T17:11:00Z"},{"sha256":"768d742ff8c3008308586d94a997a359204d58599890c978a2e4b806c6300c30","import_time":"2026-01-14T17:42:40.251423066Z","source":"ossf-package-analysis","versions":["4.3.81"],"modified_time":"2026-01-14T17:35:31Z"},{"sha256":"e9b3d6973df6c64e3388eab8e0c8ade21766941ebdf92cd1239edfaac69107eb","import_time":"2026-01-14T17:42:40.346067217Z","source":"ossf-package-analysis","versions":["4.3.82"],"modified_time":"2026-01-14T17:41:01Z"},{"import_time":"2026-01-14T17:42:40.173287767Z","sha256":"1b274f50f835543d7f9e6ffbf914fee6e02949a1f3642d1c71f4e8c76e5405d4","source":"ossf-package-analysis","versions":["4.3.79"],"modified_time":"2026-01-14T17:18:41Z"},{"sha256":"f112547b1b7054f2349820e5233edc7d64d7ffd171cc2d66250049b264356955","import_time":"2026-01-14T18:09:54.939082873Z","source":"ossf-package-analysis","versions":["4.3.83"],"modified_time":"2026-01-14T17:45:27Z"},{"sha256":"04559d10bbe8b5ab9cc1d3444f20e1d51f68772fc5febe52f60028474c57ed65","import_time":"2026-01-14T18:46:37.349811062Z","source":"ossf-package-analysis","versions":["4.3.93"],"modified_time":"2026-01-14T18:43:09Z"},{"import_time":"2026-01-14T18:46:37.410281918Z","sha256":"ebce50485ddac9b9dd4792562b17f4f02280092352b35fda08163bb6a7d956ba","source":"ossf-package-analysis","versions":["4.3.94"],"modified_time":"2026-01-14T18:45:42Z"},{"sha256":"ebdbe87a75bc8a1fdaa100305821df2a7c522b7c5aa8e7bb9e22a35882ead2ba","import_time":"2026-01-14T19:07:25.092833158Z","source":"ossf-package-analysis","versions":["4.3.98"],"modified_time":"2026-01-14T18:56:00Z"},{"sha256":"f4a8bef0b2bc1454c1b3eba50276ee087da095b846f49310c92e62d46bae7d0a","import_time":"2026-01-14T19:07:25.195462107Z","source":"ossf-package-analysis","versions":["4.3.96"],"modified_time":"2026-01-14T19:02:06Z"},{"sha256":"02510e627feb40d3ad03a54d1e09d11247df5d9dd6e0160403170e01f3af86b5","import_time":"2026-01-14T19:07:25.265120158Z","source":"ossf-package-analysis","versions":["4.3.100"],"modified_time":"2026-01-14T19:02:48Z"},{"sha256":"a54d0a5f016c45239c597ce14d6447417cbe64c93d0f551d30e46d23b8e23f3b","import_time":"2026-01-14T19:36:35.414198875Z","source":"ossf-package-analysis","versions":["4.3.102"],"modified_time":"2026-01-14T19:10:34Z"},{"sha256":"8acfe7c0a1c5ee106f6d1efc7197ea8eba01e61468242a9ea645500c3bb333fd","import_time":"2026-01-15T03:36:23.436799307Z","source":"ossf-package-analysis","versions":["4.3.104"],"modified_time":"2026-01-15T03:05:33Z"},{"sha256":"a560967605300e4880a5f5dea7376f545cbe9066166cc4015b2fcdf682b5eaf4","import_time":"2026-01-15T03:36:23.521563408Z","source":"ossf-package-analysis","versions":["4.3.106"],"modified_time":"2026-01-15T03:11:21Z"},{"import_time":"2026-01-15T06:10:20.690826549Z","sha256":"8da92a3f6d97c135bd9c528e4146e7fa7244f95a74b64fcc570e2a9dcb74d871","source":"ossf-package-analysis","versions":["4.3.108"],"modified_time":"2026-01-15T05:55:33Z"},{"sha256":"a5df03f713b1c83417dac8d2bcd29735b9a2aae143709f8441fe063e1c4a26a1","import_time":"2026-01-15T06:10:21.073115855Z","source":"ossf-package-analysis","versions":["4.3.26"],"modified_time":"2026-01-14T12:50:44Z"},{"sha256":"b634d7e68bed57e9c45da188f8610242dbc0230990d5475e2c37ca3c4f482d17","import_time":"2026-01-15T06:10:21.182782855Z","source":"ossf-package-analysis","versions":["4.3.27"],"modified_time":"2026-01-14T12:55:36Z"},{"import_time":"2026-01-15T06:46:43.538655543Z","sha256":"09dd4343c977d0047d2dc9996e14d1d285228ba24233275d9ee482478831c179","source":"ossf-package-analysis","versions":["4.3.110"],"modified_time":"2026-01-15T06:12:31Z"},{"sha256":"0faef4f09fbb3807dc5f4eebf252ae2f21870335feba0bb2ea495d763a52110b","import_time":"2026-01-15T06:46:44.35349316Z","source":"ossf-package-analysis","versions":["4.4.1"],"modified_time":"2026-01-15T06:40:41Z"},{"sha256":"3a35642da2386734190f5408d1837445336dddbb1b4dc32accc25346e8b63e8e","import_time":"2026-01-15T06:46:44.201158424Z","source":"ossf-package-analysis","versions":["4.4.3"],"modified_time":"2026-01-15T06:35:30Z"},{"sha256":"7c4aae5c6014f38b9375169d421fcb6da7d472f220a73f3c3170a4269b8c82e6","import_time":"2026-01-15T06:46:43.904575305Z","source":"ossf-package-analysis","versions":["4.3.111"],"modified_time":"2026-01-15T06:21:02Z"},{"sha256":"da353a22763d8fd0c70a67ea2bc95ebbc17235a922caef93886404b681075708","import_time":"2026-01-15T06:46:44.032844229Z","source":"ossf-package-analysis","versions":["4.3.112"],"modified_time":"2026-01-15T06:28:50Z"},{"sha256":"420cd98c4df8fdf512172aecd601cba396869093ce889db52f711b532cae5102","import_time":"2026-01-15T07:10:15.007202229Z","source":"ossf-package-analysis","versions":["4.4.5"],"modified_time":"2026-01-15T06:56:19Z"},{"sha256":"f29b91fd76e726baac1d8d40fe4dfb60a8e8b6319c0a2d769fdb18142c16d8f3","import_time":"2026-01-15T07:10:15.080042208Z","source":"ossf-package-analysis","versions":["4.4.6"],"modified_time":"2026-01-15T07:01:26Z"},{"import_time":"2026-01-15T07:10:14.901771703Z","sha256":"f8293f73aa8b65871018f41df7ac5f085863abae9ee8a15b031acb67468392d1","source":"ossf-package-analysis","versions":["4.4.4"],"modified_time":"2026-01-15T06:50:32Z"},{"sha256":"02a0b165322c3c9fe7162a4d167ffe17afcb863d960bf0bdf93a62a4bf2ee629","import_time":"2026-01-15T07:10:15.151205853Z","source":"ossf-package-analysis","versions":["4.4.7"],"modified_time":"2026-01-15T07:04:59Z"},{"sha256":"9d20eb133a5dff0ba23c05b7c44fb96778dd774e86d7957aa19dcb43b8fe2f91","import_time":"2026-01-15T07:39:45.899290775Z","source":"ossf-package-analysis","versions":["4.4.12"],"modified_time":"2026-01-15T07:30:56Z"},{"sha256":"2e2918fedc6f0da1272c60b627c24fa8eddea4887151b8dc405ceef93f7f6e2c","import_time":"2026-01-15T08:09:42.185274787Z","source":"ossf-package-analysis","versions":["4.4.14"],"modified_time":"2026-01-15T07:42:48Z"},{"sha256":"71e3d1ca619473e9a17c8866e4d4e2a1573379a1653fb40d674aa5630ef6c153","import_time":"2026-01-15T08:09:42.27923821Z","source":"ossf-package-analysis","versions":["4.4.15"],"modified_time":"2026-01-15T07:46:02Z"},{"sha256":"ded34545f67909e01fb5024f559b642ec2ef8216d9e031e3225758fb02195f7c","import_time":"2026-01-15T09:41:49.871225862Z","source":"ossf-package-analysis","versions":["4.4.30"],"modified_time":"2026-01-15T09:37:39Z"},{"sha256":"02717f2412f88d6a5100e30067b965a0d83839627b12408704027c2da1134c4a","import_time":"2026-01-15T09:41:49.780917888Z","source":"ossf-package-analysis","versions":["4.4.28"],"modified_time":"2026-01-15T09:21:14Z"},{"sha256":"9de2a9acec7114fe17d53eb19e65ecac337c46756e530fe1d95e41298cf942a0","import_time":"2026-01-15T10:07:43.300578798Z","source":"ossf-package-analysis","versions":["4.4.34"],"modified_time":"2026-01-15T09:50:56Z"},{"import_time":"2026-01-15T10:42:35.291772998Z","sha256":"1929cff81a9b92ea9827259d566a6fb7a6f8a7db685ef288dd8f5096a7e24c48","source":"ossf-package-analysis","versions":["4.4.38"],"modified_time":"2026-01-15T10:15:08Z"},{"import_time":"2026-01-15T10:42:35.366882777Z","sha256":"533be291078a53c7a50829bef39a5ff99091343772ae479dea3fde33e87fc546","source":"ossf-package-analysis","versions":["4.4.39"],"modified_time":"2026-01-15T10:17:56Z"},{"sha256":"eca246719ace31200ff4ed3f192cdc8bf1367800472ea665cc3866b3596e68f1","import_time":"2026-01-15T15:41:42.505070857Z","source":"ossf-package-analysis","versions":["4.4.46"],"modified_time":"2026-01-15T15:33:14Z"},{"import_time":"2026-01-15T16:12:57.753302634Z","sha256":"0f2b9905adb6f827cc6a54608390be72804d67cc0c06d7580d5e686897b7999e","source":"ossf-package-analysis","versions":["4.4.48"],"modified_time":"2026-01-15T15:50:53Z"},{"ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"import_time":"2026-01-15T22:07:39.60599673Z","source":"amazon-inspector","modified_time":"2026-01-15T21:43:07Z","sha256":"c67e1e1483632e97bcfb216cd6ac37d5870178c8de00848a7a6de4df461951b4"},{"sha256":"2e19c4af31e55eea3be82d478468774b271484b0c7a8ba0078ad55fd8995ba91","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"source":"ghsa-malware","id":"GHSA-j48w-xpqc-jv3w","modified_time":"2026-01-16T03:26:04Z","import_time":"2026-01-16T03:47:26.065200068Z"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-j48w-xpqc-jv3w"}],"affected":[{"package":{"name":"admin1001","ecosystem":"npm","purl":"pkg:npm/admin1001"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["3.0.4","4.0.2","4.0.4","4.0.6","4.0.5","4.1.3","4.1.5","4.1.7","4.2.1","4.2.2","4.2.0","4.3.4","4.3.11","4.3.9","4.3.7","4.3.22","4.3.14","4.3.23","4.3.16","4.3.19","4.3.13","4.3.31","4.3.34","4.3.36","4.3.43","4.3.48","4.3.41","4.3.46","4.3.35","4.3.49","4.3.51","4.3.57","4.3.56","4.3.58","4.3.59","4.3.66","4.3.65","4.3.67","4.3.73","4.3.77","4.3.81","4.3.82","4.3.79","4.3.83","4.3.93","4.3.94","4.3.98","4.3.96","4.3.100","4.3.102","4.3.104","4.3.106","4.3.108","4.3.26","4.3.27","4.3.110","4.4.1","4.4.3","4.3.111","4.3.112","4.4.5","4.4.6","4.4.4","4.4.7","4.4.12","4.4.14","4.4.15","4.4.30","4.4.28","4.4.34","4.4.38","4.4.39","4.4.46","4.4.48"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/admin1001/MAL-2026-246.json","cwes":[{"cweId":"CWE-506","name":"Embedded Malicious Code","description":"The product contains code that appears to be malicious in nature."}]}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}