OpenSSF/OSV advisory MAL-2026-3030 confirms this npm version as malicious. The package model-poc-suhail was found to contain malicious code.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in model-poc-suhail (npm)
Details
The package model-poc-suhail was found to contain malicious code.
## Source: ossf-package-analysis (a174b5c81be71a696479861a28353965b3c60d17fb2f8a9a40f268113facbbf7) The OpenSSF Package Analysis project identified 'model-poc-suhail' @ 1.0.14 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Decision reason
OpenSSF Malicious Packages via OSV confirms model-poc-suhail@1.0.9 as malicious (MAL-2026-3030): Malicious code in model-poc-suhail (npm)