MAL-2025-192371

    Dashboard / Malicious Package / MAL-2025-192371

    MAL-2025-192371

    Published: 7 Dec 2025Last Modified: 10 Dec 2025

    Summary: Malicious code in tna_xmlparser (npm)

    Details: Source: amazon-inspector (e70bf55e611d269d207f5ff39c92876d210b2470cd6b84c251eb34e5f3a5448f) The package tna_xmlparser was found to contain malicious code. Source: ossf-package-analysis (9b77a19fbcd280e2d3476df4ce18f5e8ba9a154777f0c2528c99847b5de7db99) The OpenSSF Package Analysis project identified 'tna_xmlparser' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: tna_xmlparser

    Purl: pkg:npm/tna_xmlparser

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2025-192371 | CVE-DB