pocpoc2626

{"modified":"2026-05-12T07:30:45Z","published":"2026-05-04T16:36:10Z","schema_version":"1.7.4","id":"MAL-2026-3328","summary":"Malicious code in pocpoc2626 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (4a43e5357592b2bbbe0c68be3960ac829ab988a15b57d63df5ab954c9d0b5b09)\nThe package pocpoc2626 was found to contain malicious code.\n\n## Source: ossf-package-analysis (0176ec0fde390432553ec3dffa91438e5e923d23549ef4b836bc91de5259a21d)\nThe OpenSSF Package Analysis project identified 'pocpoc2626' @ 99.99.9998 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"ecosystem":"npm","name":"pocpoc2626"},"versions":["99.99.9998","100.0.5"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]}],"database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"0176ec0fde390432553ec3dffa91438e5e923d23549ef4b836bc91de5259a21d","import_time":"2026-05-04T16:39:00.308413379Z","modified_time":"2026-05-04T16:36:10Z","versions":["99.99.9998"]},{"source":"ossf-package-analysis","sha256":"b4744f62b321959f843350974284f2a501ea2e1e80c5ca0d9a2affd0f620b9c4","import_time":"2026-05-04T17:36:20.402188861Z","modified_time":"2026-05-04T17:05:53Z","versions":["100.0.5"]},{"source":"amazon-inspector","sha256":"4a43e5357592b2bbbe0c68be3960ac829ab988a15b57d63df5ab954c9d0b5b09","import_time":"2026-05-12T07:28:50.997599382Z","modified_time":"2026-05-12T06:53:21Z","versions":["99.99.9998","100.0.5"]}]}}