MAL-2025-192873

    Dashboard / Malicious Package / MAL-2025-192873

    MAL-2025-192873

    Published: 23 Dec 2025Last Modified: 2 Jan 2026

    Summary: Malicious code in sturdyfetch4 (npm)

    Details: Source: amazon-inspector (b0a1f215475fb968430542436e57b8aecaad84bcf2c31d52775c8ea1f0c8b3e7) The package sturdyfetch4 was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: sturdyfetch4

    Purl: pkg:npm/sturdyfetch4

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.30.1
    MAL-2025-192873 | CVE-DB