MAL-2025-190621

    Dashboard / Malicious Package / MAL-2025-190621

    MAL-2025-190621

    Published: 22 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in @eagleview/ev-mapviewer-interactions (npm)

    Details: Package is malware. It exfiltrates sensitive info, executes arbitrary code during install, and matches multiple YARA rules. Source: amazon-inspector (e2d7da79dc7cea55b1c51c17952322ec30f3d03000a7b075252e9f74084a7a06) The package @eagleview/ev-mapviewer-interactions was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KAKW3GGRHYGWAZESSE6DQJ6A

    Affected packages

    Package

    Name: @eagleview/ev-mapviewer-interactions

    Purl: pkg:npm/%40eagleview/ev-mapviewer-interactions

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2025-190621 | CVE-DB