MAL-2025-49294

    Dashboard / Malicious Package / MAL-2025-49294

    MAL-2025-49294

    Published: 31 Oct 2025Last Modified: 31 Oct 2025

    Summary: Malicious code in da-lit (npm)

    Details: Source: amazon-inspector (9a04774b86c8891b58af17e5af350189f9eccba16758e14dd16e152dcd3e0bb7) The package da-lit was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: da-lit

    Purl: pkg:npm/da-lit

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2025-49294 | CVE-DB