{"id":"MAL-2026-18338","kind":"package","aliases":["MAL-2026-18338"],"related":[],"title":"Malicious code in @azure-growth/signup-ux-components (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (d6aa62a9421f736418e09f0b247beb52637c7cb21f03cfba35656222e48215fc)\nThe OpenSSF Package Analysis project identified '@azure-growth/signup-ux-components' @ 1.2.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"@azure-growth/signup-ux-components","fixed":[],"affected":"= 1.2.2","ecosystem":"npm"},{"name":"@azure-growth/signup-ux-components","fixed":[],"affected":"= 1.2.2; = 1.2.3","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-27T11:09:51+00:00","first_seen_at":"2026-10-27T12:01:28+00:00","triaged_at":"2026-10-27T12:02:31+00:00","updated_at":"2026-10-27T13:01:56+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18338':11A,14A '-2026':10A,13A '/signup-ux-components':7A,18A,22A,49C '1.2.2':50C 'activ':68C 'analysi':38C,43C 'associ':65C 'azur':5A,47C 'azure':16A,20A 'azure-growth':4A,15A,19A,46C 'code':2A 'communic':61C 'consid':56C 'd6aa62a9421f736418e09f0b247beb52637c7cb21f03cfba35656222e48215fc':39C 'detail':27C 'domain':64C 'edit':30C 'growth':6A,17A,21A,48C 'identifi':45C 'line':33C 'mal':9A,12A 'malici':1A,23B,53C,57C,67C 'npm':8A,51C 'openssf':41C 'ossf':36C 'ossf-package-analysi':35C 'packag':24B,37C,42C,60C 'per':25C 'project':44C 'sourc':26C,34C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T11:09:51+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18338","url":"https://osv.dev/vulnerability/MAL-2026-18338","severity":"critical","published_at":"2026-10-27T11:09:51+00:00","modified_at":"2026-10-27T12:30:07+00:00","first_seen_at":"2026-10-27T12:01:28+00:00","fetched_at":"2026-10-27T13:01:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}