{"id":"MAL-2026-2967","revision":"ab0dbc5d8c294a3c9808bd7b68540433","records":[{"revision":"ab0dbc5d8c294a3c9808bd7b68540433","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"MAL-2026-2967","aliases":[],"title":"Malicious code in 6161test1234 (npm)","description":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (074806dcf23de8a6066ce2cbbcc5f711ca552db945714be52cd8d3a7e1415af4)\nThe package 6161test1234 was found to contain malicious code.\n\n## Source: ossf-package-analysis (9301ea5f660d33cbc333b2a64f7a7a8c6b644aa2a0ecfcd845e288c5b3a7f099)\nThe OpenSSF Package Analysis project identified '6161test1234' @ 1.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","state":0,"publishedAt":"2026-04-21T13:55:41+00:00","modifiedAt":"2026-04-23T21:11:11.14941+00:00","affected":[{"ecosystem":"npm","name":"6161test1234","ranges":[],"versions":["1.0.0"],"rawVersionEvidence":null}],"metrics":[],"references":[],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-2967","license":"OSV · upstream source license applies","key":"osv:MAL-2026-2967","identifiers":["MAL-2026-2967"]},"retained":false,"historicalAffected":[]}],"coverage":[]}