MAL-2026-2040

Affected Products

Timeline

• Mar 22, 2026 CVE Published
• Mar 26, 2026 CVE Updated

References

• https://github.com/advisories/GHSA-wcrr-xhm3-j3x9 advisory
• https://socket.dev/blog/canisterworm-npm-publisher-compromise-deploys-backdoor-across-29-packages url
• https://research.jfrog.com/post/canister-worm/ url
• https://www.endorlabs.com/learn/canisterworm url