MAL-2025-3601

    Dashboard / Malicious Package / MAL-2025-3601

    MAL-2025-3601

    Published: 5 May 2025Last Modified: 5 May 2025

    Summary: Malicious code in @sdrosdzol_linkedin/husky (npm)

    Details: Source: ossf-package-analysis (5e24d36da21d692922a995d564a799ff283c0dfe20bc5c90fe02d89aad33a616) The OpenSSF Package Analysis project identified '@sdrosdzol_linkedin/husky' @ 0.2.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @sdrosdzol_linkedin/husky

    Purl: pkg:npm/%40sdrosdzol_linkedin/husky

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.2.0