vinext-monorepo

{"modified":"2026-04-23T20:50:52Z","published":"2026-04-19T09:55:46Z","schema_version":"1.7.4","id":"MAL-2026-2861","summary":"Malicious code in vinext-monorepo (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b5c7279d5c84c989a0deef7944c5d1d22b89651bdc01da8fc5144622a8fc74cb)\nThe package vinext-monorepo was found to contain malicious code.\n\n## Source: ossf-package-analysis (574f240251e7be8dcdf3c0b77c1df87b69497f67e98d64b831a36ab87c2d08de)\nThe OpenSSF Package Analysis project identified 'vinext-monorepo' @ 99.10.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"ecosystem":"npm","name":"vinext-monorepo"},"versions":["99.10.9","99.9.9","99.12.9"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]}],"database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"574f240251e7be8dcdf3c0b77c1df87b69497f67e98d64b831a36ab87c2d08de","import_time":"2026-04-19T10:18:16.342750239Z","modified_time":"2026-04-19T10:05:37Z","versions":["99.10.9"]},{"source":"ossf-package-analysis","sha256":"e3ecc98f82852dad8bcdbbc67b59bf72262cc47704cae977675af25e065970e5","import_time":"2026-04-19T10:18:16.178877915Z","modified_time":"2026-04-19T09:55:46Z","versions":["99.9.9"]},{"source":"ossf-package-analysis","sha256":"80e8b3d6f0d3e01f2f0c8640a9cb2c21f8f6d47e8b29821d8753a8ce5724afa3","import_time":"2026-04-19T17:15:44.46251823Z","modified_time":"2026-04-19T17:00:53Z","versions":["99.12.9"]},{"source":"amazon-inspector","sha256":"b5c7279d5c84c989a0deef7944c5d1d22b89651bdc01da8fc5144622a8fc74cb","import_time":"2026-04-23T20:49:04.740689426Z","modified_time":"2026-04-23T20:43:56Z","versions":["99.10.9","99.9.9","99.12.9"]}]}}