registry  /  @andes-tools/colors  /  999.0.0

@andes-tools/colors@999.0.0

OSV Malicious Advisory

scanned 4m ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-6703 confirms this npm version as malicious. The OpenSSF Package Analysis project identified '@andes-tools/colors' @ 999.0.0 (npm) as malicious.

Advisory
MAL-2026-6703
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @andes-tools/colors (npm)
Details
The OpenSSF Package Analysis project identified '@andes-tools/colors' @ 999.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Decision reason
OpenSSF Malicious Packages via OSV confirms @andes-tools/colors@999.0.0 as malicious (MAL-2026-6703): Malicious code in @andes-tools/colors (npm)
References
OSV advisoryOpenSSF JSON

Source & flagged code

0 flagged
No flagged code excerpts are attached to this scan.

Findings

1 High
HighOsv Malicious Advisory