abcxyzz

{"modified":"2026-02-23T04:21:31Z","published":"2026-02-18T09:35:39Z","schema_version":"1.7.4","id":"MAL-2026-940","summary":"Malicious code in abcxyzz (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8b953a8183a1a7ba906c9117e8afe658b2606311b606d8b3ecad680076fc51e9)\nThe package abcxyzz was found to contain malicious code.\n\n## Source: ossf-package-analysis (b22a45e3a267d5930d5e8dfdb52954bf049c7b63a9bdb0818e5daff1191e7423)\nThe OpenSSF Package Analysis project identified 'abcxyzz' @ 9.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","affected":[{"package":{"ecosystem":"npm","name":"abcxyzz"},"versions":["9.9.9"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]}],"database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"b22a45e3a267d5930d5e8dfdb52954bf049c7b63a9bdb0818e5daff1191e7423","import_time":"2026-02-19T22:45:35.68043549Z","modified_time":"2026-02-18T09:35:39Z","versions":["9.9.9"]},{"source":"amazon-inspector","sha256":"8b953a8183a1a7ba906c9117e8afe658b2606311b606d8b3ecad680076fc51e9","import_time":"2026-02-23T04:19:45.146972843Z","modified_time":"2026-02-23T03:51:30Z","versions":["9.9.9"]}]}}