MAL-2026-5623
Malicious code in edu-npm-dependency-chain-demo (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: amazon-inspector (b2a7d2f1e015cb530cbc560ff593abba9ecbdde04868643cc1f46c7c23b7252d) The package was found to contain malicious code or consuming dependency that contains malicious code
## Source: ossf-package-analysis (5a2508b833cc9048538d7b995e19fdc3abb6807800a2650ef808f248a3502139) The OpenSSF Package Analysis project identified 'edu-npm-dependency-chain-demo' @ 1.0.4 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Are you affected?
Enter the version of the package you're using.
Affected packages
No fixed version published yet for edu-npm-dependency-chain-demo (npm). Pin to a known-safe version or switch to an alternative.