collabs-merchants

{"modified":"2026-03-23T05:16:26Z","published":"2026-03-18T12:44:23Z","schema_version":"1.7.4","id":"MAL-2026-1694","summary":"Malicious code in collabs-merchants (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58)\nThe package collabs-merchants was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"collabs-merchants","purl":"pkg:npm/collabs-merchants"},"versions":["99.9.12","99.9.13","99.9.14"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"41c135da22c5a2ba1852f900d088989719fbd5af812b32f8ed4e4b59368f84b3","import_time":"2026-03-19T12:18:42.770188755Z","id":"RLMA-2026-01212","modified_time":"2026-03-18T12:44:23Z","versions":["99.9.12","99.9.13","99.9.14"]},{"source":"amazon-inspector","sha256":"c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58","import_time":"2026-03-23T05:14:21.271494062Z","modified_time":"2026-03-23T05:11:41Z","versions":["99.9.12","99.9.13","99.9.14"]}]}}