—
MAL-2026-14381
Malicious code in fund-portfolio (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: ossf-package-analysis (ffad2f6c37441c2924e67b1d506d9c26dc9cb2fae325b74a596102ea5ed403bf) The OpenSSF Package Analysis project identified 'fund-portfolio' @ 999.9.12 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm / fund-portfolio
No fixed version published yet for fund-portfolio (npm). Pin to a known-safe version or switch to an alternative.