ai-fast-auto-trader

{"modified":"2026-04-16T15:42:07Z","published":"2026-03-18T12:37:54Z","schema_version":"1.7.4","id":"MAL-2026-1651","summary":"Malicious code in ai-fast-auto-trader (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c8b2575eb64d69c961ae4e503747238d564d354049b7bdc75c814eceaa941fd5)\nThe package ai-fast-auto-trader was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"ai-fast-auto-trader","purl":"pkg:npm/ai-fast-auto-trader"},"versions":["2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6"]}],"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/npm-fake-install-logs-rat"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"4a58c3a368f0deb42912ce51d14037b42c141309ab8f2a9f08752b4117e83399","import_time":"2026-03-19T12:18:32.82632463Z","id":"RLMA-2026-01099","modified_time":"2026-03-18T12:37:54Z","versions":["2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6"]},{"source":"amazon-inspector","sha256":"c8b2575eb64d69c961ae4e503747238d564d354049b7bdc75c814eceaa941fd5","import_time":"2026-03-23T05:14:12.666482537Z","modified_time":"2026-03-23T05:11:41Z","versions":["2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6"]},{"source":"reversing-labs","sha256":"bf9d5c32dc170ac1e0c296b2e9370974f2ac96d6c65372bc4daeb3cd63c724b9","import_time":"2026-04-16T15:39:25.408449944Z","id":"RLUA-2026-01884","modified_time":"2026-04-16T09:43:24Z"}]}}