pkgnewfefame1

{"modified":"2026-04-16T15:42:09Z","published":"2026-03-18T13:03:54Z","schema_version":"1.7.4","id":"MAL-2026-1816","summary":"Malicious code in pkgnewfefame1 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (784cb2a0a3df5c95ee2f3f5b348780d29ffa4e6d03263d5611531f0b6babe20e)\nThe package pkgnewfefame1 was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"pkgnewfefame1","purl":"pkg:npm/pkgnewfefame1"},"versions":["3.2.1"]}],"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/npm-fake-install-logs-rat"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"5101b98ec1f550b43d291433172e441372a98f5d285afb7e156aed876c00aead","import_time":"2026-03-19T12:19:05.705873003Z","id":"RLMA-2026-01493","modified_time":"2026-03-18T13:03:54Z","versions":["3.2.1"]},{"source":"amazon-inspector","sha256":"784cb2a0a3df5c95ee2f3f5b348780d29ffa4e6d03263d5611531f0b6babe20e","import_time":"2026-03-23T05:14:05.623673149Z","modified_time":"2026-03-23T05:11:41Z","versions":["3.2.1"]},{"source":"reversing-labs","sha256":"0f12e8b5223e452cce3d4c13dd04204507b4c5b8d445058c5fb32a67959cbe88","import_time":"2026-04-16T15:39:32.377692376Z","id":"RLUA-2026-02025","modified_time":"2026-04-16T10:11:24Z"}]}}