MAL-2025-190586

    Dashboard / Malicious Package / MAL-2025-190586

    MAL-2025-190586

    Published: 20 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in identity-authn-core-ui (npm)

    Details: Source: amazon-inspector (db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5) The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis (5e1cb9631098da2b7a2ad4216f16c0e3cb2cd82dc7ccadcb4eec27a810012b57) The OpenSSF Package Analysis project identified 'identity-authn-core-ui' @ 13.1272.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: identity-authn-core-ui

    Purl: pkg:npm/identity-authn-core-ui

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    13.1272.0
    MAL-2025-190586 | CVE-DB