MAL-2026-3311
Malicious code in path-addon (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: amazon-inspector (1f1ee3f4c05bbe24c4113835e304dd3ee650c0a9eee8a4d62046283612827742) The package path-addon was found to contain malicious code.
## Source: ossf-package-analysis (4aac3da4c776f814c79af215bfde0f1ee2c3db50e9b18997447f28e9d04df88a) The OpenSSF Package Analysis project identified 'path-addon' @ 1.0.4 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
- The package executes one or more commands associated with malicious behavior.
Are you affected?
Enter the version of the package you're using.
Affected packages
No fixed version published yet for path-addon (npm). Pin to a known-safe version or switch to an alternative.