{"id":"MAL-2026-18252","revision":"df4709bb327f4eceae671677cbf50de9","records":[{"revision":"df4709bb327f4eceae671677cbf50de9","observedAt":"2026-10-25T07:17:21.169+00:00","statement":{"source":"osv","id":"MAL-2026-18252","aliases":[],"title":"Malicious code in @eforms/forms-api (npm)","description":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (cbe6ac9c18c859c04807fb2bd866f2eda2b70a4aa2583096b7138ab2adc90540)\nThe OpenSSF Package Analysis project identified '@eforms/forms-api' @ 2.0.0-SNAPSHOT (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","state":0,"publishedAt":"2026-10-25T06:26:03+00:00","modifiedAt":"2026-10-25T06:30:04.9106881+00:00","affected":[{"ecosystem":"npm","name":"@eforms/forms-api","ranges":[],"versions":["2.0.0-SNAPSHOT"],"rawVersionEvidence":null}],"metrics":[],"references":[],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-18252","license":"OSV · upstream source license applies","key":"osv:MAL-2026-18252","identifiers":["MAL-2026-18252"]},"retained":false,"historicalAffected":[]}],"coverage":[]}