MAL-2025-34723

    Dashboard / Malicious Package / MAL-2025-34723

    MAL-2025-34723

    Published: 14 Aug 2025Last Modified: 16 Apr 2026

    Summary: Malicious code in terminalcolor256 (npm)

    Details: The package terminalcolor256 was found to contain malicious code.

    References: https://www.reversinglabs.com/blog/inside-graphalgo

    Affected packages

    Package

    Name: terminalcolor256

    Purl: pkg:npm/terminalcolor256

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    2.0.2
    2.0.3
    2.0.4
    2.0.5
    2.0.6
    2.0.7
    2.0.8
    2.0.9