{"id":"MAL-2026-18522","url":"https://compromised.live/t/MAL-2026-18522","kind":"compromised_package","tier":1,"severity":"critical","title":"Malicious code in dsh-moss-console (npm)","summary":"Malicious code was published inside this npm package, so installing it can let attackers run harmful code on the machine that installs it. npm package dsh-moss-console, version 3.3.0. Remove or downgrade dsh-moss-console 3.3.0 now, and check systems that installed it for signs of compromise.","summary_source":"ai","affected":[{"ecosystem":"npm","package":"dsh-moss-console","affected":"3.3.0","fixed":[]}],"epss":null,"kev":null,"first_seen":"2026-11-03T22:10:45.281Z","updated_at":"2026-11-03T22:10:45.281Z","status":"active","details":"","aliases":["GHSA-cw2g-cxwh-wqqm","MAL-2026-18522"],"sources":[{"name":"osv","id":"MAL-2026-18522","url":"https://osv.dev/vulnerability/MAL-2026-18522"}]}