MAL-2025-190865

    Dashboard / Malicious Package / MAL-2025-190865

    MAL-2025-190865

    Published: 24 Nov 2025Last Modified: 24 Nov 2025

    Summary: Malicious code in @darwinex/react-custom-scrollbars (npm)

    Details: Source: amazon-inspector (3c14e6f6b8558a92600a6b705cd18fbcfc9eca9a163fcd69c792492154fbe37e) The package @darwinex/react-custom-scrollbars was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: @darwinex/react-custom-scrollbars

    Purl: pkg:npm/%40darwinex/react-custom-scrollbars

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions