{"id":"MAL-2026-2804","summary":"Malicious code in transcript-viewer-ui-demo (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d52899913925c544bb906fcc1d752431c86c54c3465310a8eee4318ba29164e0)\nThe package transcript-viewer-ui-demo was found to contain malicious code.\n","modified":"2026-04-23T21:18:25.763745Z","published":"2026-04-16T10:21:08Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-02053","import_time":"2026-04-16T15:39:18.382780504Z","modified_time":"2026-04-16T10:21:08Z","sha256":"3b1f66f24f3cf310ce8eb89c7aae6250b4624e45e025832c15ec895996592541","source":"reversing-labs","versions":["9.9.9"]},{"source":"amazon-inspector","versions":["9.9.9"],"import_time":"2026-04-23T20:49:02.353694712Z","modified_time":"2026-04-23T20:43:56Z","sha256":"d52899913925c544bb906fcc1d752431c86c54c3465310a8eee4318ba29164e0"}]},"affected":[{"package":{"name":"transcript-viewer-ui-demo","ecosystem":"npm","purl":"pkg:npm/transcript-viewer-ui-demo"},"versions":["9.9.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/transcript-viewer-ui-demo/MAL-2026-2804.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}