MAL-2025-40364

    Dashboard / Malicious Package / MAL-2025-40364

    MAL-2025-40364

    Published: 14 Aug 2025Last Modified: 14 Aug 2025

    Summary: Malicious code in yarrow_kz9d8_1a1uw_verdant (npm)

    Details: The package yarrow_kz9d8_1a1uw_verdant was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: yarrow_kz9d8_1a1uw_verdant

    Purl: pkg:npm/yarrow_kz9d8_1a1uw_verdant

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2025-40364 | CVE-DB