MAL-2025-49299

    Dashboard / Malicious Package / MAL-2025-49299

    MAL-2025-49299

    Published: 31 Oct 2025Last Modified: 31 Oct 2025

    Summary: Malicious code in gunpowder-ghost-curse (npm)

    Details: Source: amazon-inspector (4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2) The package gunpowder-ghost-curse was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: gunpowder-ghost-curse

    Purl: pkg:npm/gunpowder-ghost-curse

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions