MAL-2025-2548

    Dashboard / Malicious Package / MAL-2025-2548

    MAL-2025-2548

    Published: 19 Mar 2025Last Modified: 19 Mar 2025

    Summary: Malicious code in github.com/shallowmulti/hypert (Go)

    Details: Source: google-open-source-security (25d0e55a48f82ab8ddd5e90d258c133505fa7fea03b775c1987e0dd7f9453f08) Malcious typosquatting Go packages targeting Linux and macOS systems used to as a loader to download and run another malicious payload.

    References: https://socket.dev/blog/typosquatted-go-packages-deliver-malware-loader

    Affected packages

    Package

    Name: github.com/shallowmulti/hypert

    Purl: pkg:golang/github.com/shallowmulti/hypert

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2025-2548 | CVE-DB