MAL-2025-190549

    Dashboard / Malicious Package / MAL-2025-190549

    MAL-2025-190549

    Published: 17 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in ancestry-unified-logger (npm)

    Details: Source: amazon-inspector (654a8c92f4dee2f432b77c84c15e3926d913e506e58375a0958c08cc53ff134b) The package ancestry-unified-logger was found to contain malicious code. Source: ossf-package-analysis (033a3d4c8fd60d382fb8c44c9b87b597e54b466b0cfa91d7b910726eee601680) The OpenSSF Package Analysis project identified 'ancestry-unified-logger' @ 85.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: ancestry-unified-logger

    Purl: pkg:npm/ancestry-unified-logger

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    85.0.0
    MAL-2025-190549 | CVE-DB