trae-browser-inspect

{"modified":"2026-03-01T20:43:48Z","published":"2026-02-25T03:30:34Z","schema_version":"1.7.4","id":"MAL-2026-1042","summary":"Malicious code in trae-browser-inspect (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2fbd2b8603f95aa744b92e1f624c31c4afc4dcb7ef634096a331302462b45e1f)\nThe package trae-browser-inspect was found to contain malicious code.\n\n## Source: ossf-package-analysis (fd5bf396be565b12f9c16a91a3d228cd650efde38a6ebf3b6656837d19adfdbb)\nThe OpenSSF Package Analysis project identified 'trae-browser-inspect' @ 9.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","affected":[{"package":{"ecosystem":"npm","name":"trae-browser-inspect"},"versions":["9.9.9"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]}],"database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"fd5bf396be565b12f9c16a91a3d228cd650efde38a6ebf3b6656837d19adfdbb","import_time":"2026-02-26T01:37:59.870438665Z","modified_time":"2026-02-25T03:30:34Z","versions":["9.9.9"]},{"source":"amazon-inspector","sha256":"2fbd2b8603f95aa744b92e1f624c31c4afc4dcb7ef634096a331302462b45e1f","import_time":"2026-03-01T20:41:57.708452584Z","modified_time":"2026-03-01T20:25:57Z","versions":["9.9.9"]}]}}