MAL-2025-190872

    Dashboard / Malicious Package / MAL-2025-190872

    MAL-2025-190872

    Published: 24 Nov 2025Last Modified: 23 Dec 2025

    Summary: Malicious code in @mparpaillon/page (npm)

    Details: Source: amazon-inspector (fbc632dc769c1c17211f5a14d8e9f40217a70b214e5a367f0ab8fccc939332a1) The package @mparpaillon/page was found to contain malicious code.

    References: https://checkmarx.com/zero-post/shai-huluds-second-coming-npm-malware-attack-evolved, https://www.veracode.com/blog/return-of-the-shai-hulud-worm, https://www.reversinglabs.com/blog/another-shai-hulud-npm-worm-is-spreading-heres-what-you-need-to-know, https://research.jfrog.com/post/shai-hulud-the-second-coming

    Affected packages

    Package

    Name: @mparpaillon/page

    Purl: pkg:npm/%40mparpaillon/page

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1
    MAL-2025-190872 | CVE-DB