{"id":"MAL-2026-3328","summary":"Malicious code in pocpoc2626 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (4a43e5357592b2bbbe0c68be3960ac829ab988a15b57d63df5ab954c9d0b5b09)\nThe package pocpoc2626 was found to contain malicious code.\n\n## Source: ossf-package-analysis (0176ec0fde390432553ec3dffa91438e5e923d23549ef4b836bc91de5259a21d)\nThe OpenSSF Package Analysis project identified 'pocpoc2626' @ 99.99.9998 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2026-05-12T07:57:38.189383Z","published":"2026-05-04T16:36:10Z","database_specific":{"malicious-packages-origins":[{"sha256":"0176ec0fde390432553ec3dffa91438e5e923d23549ef4b836bc91de5259a21d","source":"ossf-package-analysis","versions":["99.99.9998"],"import_time":"2026-05-04T16:39:00.308413379Z","modified_time":"2026-05-04T16:36:10Z"},{"modified_time":"2026-05-04T17:05:53Z","sha256":"b4744f62b321959f843350974284f2a501ea2e1e80c5ca0d9a2affd0f620b9c4","source":"ossf-package-analysis","versions":["100.0.5"],"import_time":"2026-05-04T17:36:20.402188861Z"},{"import_time":"2026-05-12T07:28:50.997599382Z","modified_time":"2026-05-12T06:53:21Z","sha256":"4a43e5357592b2bbbe0c68be3960ac829ab988a15b57d63df5ab954c9d0b5b09","source":"amazon-inspector","versions":["99.99.9998","100.0.5"]}]},"affected":[{"package":{"name":"pocpoc2626","ecosystem":"npm","purl":"pkg:npm/pocpoc2626"},"versions":["99.99.9998","100.0.5"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/pocpoc2626/MAL-2026-3328.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}