MAL-2025-192680

    Dashboard / Malicious Package / MAL-2025-192680

    MAL-2025-192680

    Published: 20 Dec 2025Last Modified: 22 Dec 2025

    Summary: Malicious code in escaux-scrumboard-api (npm)

    Details: Source: amazon-inspector (b2d3a9c35af8fd074327c2b67262963aa30c1d92abbee4132456ef354f51140e) The package escaux-scrumboard-api was found to contain malicious code. Source: ossf-package-analysis (2abae408922caa16c739134980297033d10a17b42b1ee60f80b53c471ea0d9a5) The OpenSSF Package Analysis project identified 'escaux-scrumboard-api' @ 999.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: escaux-scrumboard-api

    Purl: pkg:npm/escaux-scrumboard-api

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    999.0.0
    MAL-2025-192680 | CVE-DB