MAL-2025-27124

    Dashboard / Malicious Package / MAL-2025-27124

    MAL-2025-27124

    Published: 14 Aug 2025Last Modified: 29 Aug 2025Aliases: 
    SNYK-JS-NAYAFLORE-11800941

    Summary: Malicious code in naya-flore (npm)

    Details: The package naya-flore was found to contain malicious code.

    References: https://socket.dev/blog/malicious-npm-packages-target-whatsapp-developers-with-remote-kill-switch, https://www.npmjs.com/package/naya-flore, https://www.npmjs.com/package/node-smsk, https://www.npmjs.com/package/nvlore-hsc, https://security.snyk.io/vuln/SNYK-JS-NAYAFLORE-11800941, https://www.npmjs.com/package/@veryflore/disc, https://www.npmjs.com/package/very-nay, https://www.npmjs.com/package/naya-clone, https://www.npmjs.com/package/nouku-search

    Affected packages

    Package

    Name: naya-flore

    Purl: pkg:npm/naya-flore

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    4.7.1
    4.7.2
    4.7.3
    4.7.4
    4.7.5
    4.7.6
    MAL-2025-27124 | CVE-DB