corp-sign-core-js

{"modified":"2026-03-23T05:16:26Z","published":"2026-03-18T12:45:10Z","schema_version":"1.7.4","id":"MAL-2026-1701","summary":"Malicious code in corp-sign-core-js (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8f94c959e18ab1995ded47f657c3ab5e5b8924c279ab0dc9e95f42ca2dc36027)\nThe package corp-sign-core-js was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"corp-sign-core-js","purl":"pkg:npm/corp-sign-core-js"},"versions":["0.99.99","1.99.99","2.99.99"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"7c02e611750fa54116f873c731ee5f02f099a9fc9f37c0db8a226953324b09b8","import_time":"2026-03-19T12:18:44.010491204Z","id":"RLMA-2026-01227","modified_time":"2026-03-18T12:45:10Z","versions":["0.99.99","1.99.99","2.99.99"]},{"source":"amazon-inspector","sha256":"8f94c959e18ab1995ded47f657c3ab5e5b8924c279ab0dc9e95f42ca2dc36027","import_time":"2026-03-23T05:14:01.497929014Z","modified_time":"2026-03-23T05:11:41Z","versions":["0.99.99","1.99.99","2.99.99"]}]}}