CHW-2303 MalwareBlocked
package flagged as known malicious by the supply-chain scanner and blocked; verify the package coordinate and report the detection if it appears to be a false positive
Default message: package flagged as known malicious by the supply-chain scanner and blocked; verify the package coordinate and report the detection if it appears to be a false positive
HTTP status:403(client)
Reason:MALWARE_DETECTED
Problem. The supply-chain scanner flagged the package as known malicious and blocked the download. Cause. The package matches an entry in the malware catalog (OSV, PyPI malware feed, npm security advisories). Fix. Verify the coordinate, audit the lockfile for similar packages, and report the detection if it appears to be a false positive. HTTP 403.