{"schema_version":"1.7.5","id":"MAL-2026-497","published":"2026-01-23T18:12:42Z","modified":"2026-03-19T12:48:55.682523Z","summary":"Malicious code in test-on-other (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (aaeca000a0d70bc52934cc2047e1924aa1f63f790734f0063a190476e7accdf2)\nThe package test-on-other was found to contain malicious code.\n","affected":[{"package":{"name":"test-on-other","ecosystem":"npm","purl":"pkg:npm/test-on-other"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["99.9.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/test-on-other/MAL-2026-497.json"}}],"database_specific":{"malicious-packages-origins":[{"import_time":"2026-01-23T18:47:21.954251087Z","modified_time":"2026-01-23T18:12:42Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"aaeca000a0d70bc52934cc2047e1924aa1f63f790734f0063a190476e7accdf2","source":"amazon-inspector"},{"id":"RLMA-2026-01617","import_time":"2026-03-19T12:19:13.331203113Z","modified_time":"2026-03-18T13:12:36Z","sha256":"d6673af034bbe9bf53c694c682b3d69b202b0617a3656251ac672422833e21f7","source":"reversing-labs","versions":["99.9.8"]}]},"credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}