MAL-2026-10879Malicious code in @dxcl/user-js (npm)
| Ecosystem | Package | Version |
|---|---|---|
| npm | @dxcl/user-js | 99.99.99 |
{"schema_version":"1.7.4","id":"MAL-2026-10879","published":"2026-07-20T10:19:40Z","modified":"2026-09-01T11:20:23.700903825Z","aliases":["GHSA-vwf5-f55j-6283"],"summary":"Malicious code in @dxcl/user-js (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"name":"@dxcl/user-js","ecosystem":"npm","purl":"pkg:npm/%40dxcl/user-js"},"versions":["99.99.99"]}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vwf5-f55j-6283"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-05420","import_time":"2026-07-20T13:14:40.156922614Z","modified_time":"2026-07-20T10:19:40Z","sha256":"c5a4fbba418f53913d8bd197bd4f44a7a4b3887e561e9c4f279cea3833762783","source":"reversing-labs","versions":["99.99.99"]},{"id":"RLUA-2026-05857","import_time":"2026-09-01T11:17:41.408610076Z","modified_time":"2026-08-24T16:22:12Z","sha256":"b3ceb33273b9c60466bc6fb6b4246ef50fd9cefe715c2b0f4586606eed1f550a","source":"reversing-labs"}]},"credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}数据来源:OpenSSF Malicious Packages · Apache-2.0