{
 "affected": [
  {
   "package": {
    "ecosystem": "npm",
    "name": "react-bootstrap-table-next-bg"
   },
   "versions": [
    "9.9.9"
   ]
  }
 ],
 "aliases": [
  "MAL-2026-18798"
 ],
 "credits": [
  {
   "contact": [
    "https://protet.io/intel/npm/react-bootstrap-table-next-bg/9.9.9"
   ],
   "name": "Protet",
   "type": "FINDER"
  }
 ],
 "details": "A dependency-confusion package published 2026-11-07 under the name react-bootstrap-table-next-bg with the inflated version 9.9.9 to win resolution over a private package. Both its preinstall and postinstall hooks run 'node beacon.js', which sends the machine's hostname, user name, current working directory and platform as query parameters of a cleartext HTTP GET to the hardcoded endpoint http://100.24.177.136/cb. Self-described as an authorized dependency-confusion proof of concept. Remove the package and treat the hostnames, user names and paths of affected build machines as disclosed.",
 "id": "PROTET-NPM-2026-165",
 "modified": "2026-11-10T00:29:01Z",
 "published": "2026-11-07T17:59:01Z",
 "references": [
  {
   "type": "REPORT",
   "url": "https://protet.io/intel/npm/react-bootstrap-table-next-bg/9.9.9"
  }
 ],
 "schema_version": "1.6.0",
 "summary": "Malicious code in react-bootstrap-table-next-bg (npm)"
}