MAL-2025-192451

    Dashboard / Malicious Package / MAL-2025-192451

    MAL-2025-192451

    Published: 11 Dec 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in libxmlfinal (npm)

    Details: Source: amazon-inspector (b00664d7d8c2cad969c4ae81a3e41100c2d896bb0fc1eccde422b4c676e9bf9c) The package libxmlfinal was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: libxmlfinal

    Purl: pkg:npm/libxmlfinal

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    0.30.3
    MAL-2025-192451 | CVE-DB