MAL-2025-190588

    Dashboard / Malicious Package / MAL-2025-190588

    MAL-2025-190588

    Published: 20 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in @ra-ftds/ra-flourish-design-tokens (npm)

    Details: Source: amazon-inspector (f72b65d4ce1abb0b35aca62b21968c19b6e8e99ec60962be31a4179ba5f22bec) The package @ra-ftds/ra-flourish-design-tokens was found to contain malicious code. Source: ossf-package-analysis (5a251361ace071661e36a08fab33db0ff683232d0ff9f6d6d15a1551ade77bf2) The OpenSSF Package Analysis project identified '@ra-ftds/ra-flourish-design-tokens' @ 43.3.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @ra-ftds/ra-flourish-design-tokens

    Purl: pkg:npm/%40ra-ftds/ra-flourish-design-tokens

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    43.3.0
    MAL-2025-190588 | CVE-DB