MAL-2025-192426

    Dashboard / Malicious Package / MAL-2025-192426

    MAL-2025-192426

    Published: 9 Dec 2025Last Modified: 10 Dec 2025

    Summary: Malicious code in libxmljsololo2 (npm)

    Details: Source: amazon-inspector (ddf08b4bf0c122f751f82c3c5b909759570d84e47e5059bde5729221ae910a15) The package libxmljsololo2 was found to contain malicious code. Source: ossf-package-analysis (e4990f2ad9b80a96f05d335d0d8f89fbe25f5b84b3f3d4c1c9f02b1dea179710) The OpenSSF Package Analysis project identified 'libxmljsololo2' @ 0.30.2 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: libxmljsololo2

    Purl: pkg:npm/libxmljsololo2

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.30.2