MAL-2025-190587

    Dashboard / Malicious Package / MAL-2025-190587

    MAL-2025-190587

    Published: 20 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in alicenpmpocpackage (npm)

    Details: Source: amazon-inspector (158edf3777a6df259583332b3694508454333d6643c7eb04eea85176ba9df724) The package alicenpmpocpackage was found to contain malicious code. Source: ossf-package-analysis (b5585cdc20c888debb8c66cd63974debf0f984bbc6979423c92746cba3ac6cc2) The OpenSSF Package Analysis project identified 'alicenpmpocpackage' @ 9.6.6 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: alicenpmpocpackage

    Purl: pkg:npm/alicenpmpocpackage

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    9.6.6
    MAL-2025-190587 | CVE-DB