MAL-2026-3311

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (4aac3da4c776f814c79af215bfde0f1ee2c3db50e9b18997447f28e9d04df88a)

The OpenSSF Package Analysis project identified 'path-addon' @ 1.0.4 (npm) as malicious.

It is considered malicious because:

• The package communicates with a domain associated with malicious activity.

• The package executes one or more commands associated with malicious behavior.