OpenSSF/OSV advisory MAL-2026-3365 confirms this npm version as malicious. The package @b2bneo-rest/api-csf was found to contain malicious code.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @b2bneo-rest/api-csf (npm)
Details
The package @b2bneo-rest/api-csf was found to contain malicious code.
## Source: ossf-package-analysis (ecf11827aa47662d619d5f3cf5f5dd125bdf7a2aed5191c9afde8367b4064c7e) The OpenSSF Package Analysis project identified '@b2bneo-rest/api-csf' @ 1.0.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Decision reason
OpenSSF Malicious Packages via OSV confirms @b2bneo-rest/api-csf@1.0.0 as malicious (MAL-2026-3365): Malicious code in @b2bneo-rest/api-csf (npm)