MAL-2025-49287

    Dashboard / Malicious Package / MAL-2025-49287

    MAL-2025-49287

    Published: 31 Oct 2025Last Modified: 31 Oct 2025

    Summary: Malicious code in month_year_dropdown (npm)

    Details: Source: amazon-inspector (6d30f8bd0beed9617d4eaeb8717a7dfcbe805a095a59966041e4af31d174f9d2) The package month_year_dropdown was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: month_year_dropdown

    Purl: pkg:npm/month_year_dropdown

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions