MAL-2026-2375Malicious code in nf-console (npm)
| Ecosystem | Package | Version |
|---|---|---|
| npm | nf-console | 99.0.0 |
| npm | nf-console | 99.0.1 |
{"modified":"2026-04-07T14:41:23Z","published":"2026-03-24T15:53:11Z","schema_version":"1.7.4","id":"MAL-2026-2375","summary":"Malicious code in nf-console (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7)\nThe package nf-console was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"nf-console","purl":"pkg:npm/nf-console"},"versions":["99.0.0","99.0.1"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"1dabd14072698feed30c1ab0d99fc4dc507a829c781747d3e6cd87b2e4646367","import_time":"2026-04-01T12:26:09.89972713Z","id":"RLMA-2026-01792","modified_time":"2026-03-24T15:53:11Z","versions":["99.0.0","99.0.1"]},{"source":"amazon-inspector","sha256":"8ba9583e189e78f6548f1b112ee725ed98a767db49b567918e534e4384e30ae7","import_time":"2026-04-07T14:39:19.492844319Z","modified_time":"2026-04-07T14:24:50Z","versions":["99.0.0","99.0.1"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0