MAL-2025-49123

    Dashboard / Malicious Package / MAL-2025-49123

    MAL-2025-49123

    Published: 30 Oct 2025Last Modified: 30 Oct 2025

    Summary: Malicious code in epic-comment-rating-service (npm)

    Details: Source: amazon-inspector (e545e5ad95e677ec0468b1254d12e8d5f47eb49cb6261a4ec337fd1c6dee7020) The package epic-comment-rating-service was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: epic-comment-rating-service

    Purl: pkg:npm/epic-comment-rating-service

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2025-49123 | CVE-DB