MAL-2025-190870

    Dashboard / Malicious Package / MAL-2025-190870

    MAL-2025-190870

    Published: 24 Nov 2025Last Modified: 23 Dec 2025

    Summary: Malicious code in @mparpaillon/connector-parse (npm)

    Details: Source: amazon-inspector (ffec89e4bd3b2d309b636261098474ed4816b5b9bd40872855c24c082de3666c) The package @mparpaillon/connector-parse was found to contain malicious code.

    References: https://www.mend.io/blog/shai-hulud-the-second-coming, https://checkmarx.com/zero-post/shai-huluds-second-coming-npm-malware-attack-evolved, https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains, https://www.veracode.com/blog/return-of-the-shai-hulud-worm, https://www.reversinglabs.com/blog/another-shai-hulud-npm-worm-is-spreading-heres-what-you-need-to-know

    Affected packages

    Package

    Name: @mparpaillon/connector-parse

    Purl: pkg:npm/%40mparpaillon/connector-parse

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1