{"id":"MAL-2026-2866","revision":"d8d62662337e4f0cb14933493dcfa4f3","records":[{"revision":"d8d62662337e4f0cb14933493dcfa4f3","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"MAL-2026-2866","aliases":[],"title":"Malicious code in @tableau__catalog-messages/database_lower (npm)","description":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (4155e0aa6cc429c2ea66b3b131055983379b13cab66b74fa3c1758e83a48ec54)\nThe package @tableau__catalog-messages/database_lower was found to contain malicious code.\n\n## Source: ossf-package-analysis (d29e8bcb2336d78e40b4d6ff2512beb6286c3426bb33d27a41abdbeb98d59c68)\nThe OpenSSF Package Analysis project identified '@tableau__catalog-messages/database_lower' @ 99.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","state":0,"publishedAt":"2026-04-09T08:55:50+00:00","modifiedAt":"2026-04-23T21:11:49.73087+00:00","affected":[{"ecosystem":"npm","name":"@tableau__catalog-messages/database_lower","ranges":[],"versions":["99.9.9"],"rawVersionEvidence":null}],"metrics":[],"references":[],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-2866","license":"OSV · upstream source license applies","key":"osv:MAL-2026-2866","identifiers":["MAL-2026-2866"]},"retained":false,"historicalAffected":[]}],"coverage":[]}