MAL-2025-191574

    Dashboard / Malicious Package / MAL-2025-191574

    MAL-2025-191574

    Published: 1 Dec 2025Last Modified: 2 Dec 2025

    Summary: Malicious code in eslint-lodash (npm)

    Details: Source: amazon-inspector (64e5339ebcf037bec59b58b4622230d6f22619a009685877e469b566e883248a) The package eslint-lodash was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: eslint-lodash

    Purl: pkg:npm/eslint-lodash

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0