MAL-2025-3541
Dashboard / Malicious Package / MAL-2025-3541
MAL-2025-3541
Published: 23 Apr 2025Last Modified: 23 Apr 2025
Summary: Malicious code in express-cookie-parser (npm)
Details: This package impersonates the popular 'cookie-parser' package. Remote code execution, persistence, self-deletion, and obfuscation found in the package's code confirm its malicious nature.
References:
Affected packages
Package
Name: express-cookie-parser
Purl: pkg:npm/express-cookie-parser
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -None
