MAL-2025-190589

    Dashboard / Malicious Package / MAL-2025-190589

    MAL-2025-190589

    Published: 20 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in @ra-ftds/motion-extension (npm)

    Details: Source: amazon-inspector (21dda61891bfe950e0374d30755261789fcbee68353f030c03bb4129f9f62a4f) The package @ra-ftds/motion-extension was found to contain malicious code. Source: ossf-package-analysis (c809b37c988e90b5120a215c81bbc3a4d11eaf489e7d9a689a9eee512b147fc3) The OpenSSF Package Analysis project identified '@ra-ftds/motion-extension' @ 52.1.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @ra-ftds/motion-extension

    Purl: pkg:npm/%40ra-ftds/motion-extension

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    52.1.0
    MAL-2025-190589 | CVE-DB