OpenSSF/OSV advisory MAL-2026-3421 confirms this npm version as malicious. The package oneblk-design-system was found to contain malicious code.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in oneblk-design-system (npm)
Details
The package oneblk-design-system was found to contain malicious code.
## Source: ossf-package-analysis (0edb2241655649c1939ad8633be7ac2c8459093640c8948a579b63f581dbadac) The OpenSSF Package Analysis project identified 'oneblk-design-system' @ 99.99.99 (npm) as malicious.
It is considered malicious because:
- The package executes one or more commands associated with malicious behavior.
Decision reason
OpenSSF Malicious Packages via OSV confirms oneblk-design-system@99.99.99 as malicious (MAL-2026-3421): Malicious code in oneblk-design-system (npm)