MAL-2025-192271

    Dashboard / Malicious Package / MAL-2025-192271

    MAL-2025-192271

    Published: 3 Dec 2025Last Modified: 23 Dec 2025

    Summary: Malicious code in @bhyolken/echotest (npm)

    Details: Source: amazon-inspector (3f892e3f11e25c8e53cb0d01901d0e5f6651888b1d6e29d64da4f0b5b85660eb) The package @bhyolken/echotest was found to contain malicious code. Source: ossf-package-analysis (1e629126b1c5a4e3de27b1e8fa4c31f43eea17d846723e2d12e5d7d3fce7d2af) The OpenSSF Package Analysis project identified '@bhyolken/echotest' @ 1.1.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: @bhyolken/echotest

    Purl: pkg:npm/%40bhyolken/echotest

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1.1.0
    MAL-2025-192271 | CVE-DB