atlassian-wallboard-plugin

GHSA-vj43-6r45-847h

Malicious code in atlassian-wallboard-plugin (npm)

Details

**Severity:** Critical

**Affected versions:** `= 10.0.0`

## Source: ossf-package-analysis (65fa335403aab4ce396a9df1a2b0d61634f51ee8d63db761c0ccf21f744b6292)
The OpenSSF Package Analysis project identified 'atlassian-wallboard-plugin' @ 10.0.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/db42b448a9b6e1e97a353c5f2aa6a1bf2ab5cfa4/osv/malicious/npm/atlassian-wallboard-plugin/MAL-2026-18437.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/db42b448a9b6e1e97a353c5f2aa6a1bf2ab5cfa4/osv/malicious/npm/atlassian-wallboard-plugin/MAL-2026-18437.json
- https://github.com/advisories/GHSA-vj43-6r45-847h

Compromised versions (1)

= 10.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.