MAL-2025-49331

    Dashboard / Malicious Package / MAL-2025-49331

    MAL-2025-49331

    Published: 3 Nov 2025Last Modified: 1 Sept 2026Aliases: 
    GHSA-ggr4-5jxh-37qx

    Summary: Malicious code in 8jfiesaf83 (npm)

    Details: Source: amazon-inspector (5ef67af98dc92779c9c7da804d6673f1838980f53e7376335dae65a375877a2e) The package 8jfiesaf83 was found to contain malicious code.

    References: https://www.veracode.com/blog/malicious-npm-package-targeting-github-actions, https://github.com/advisories/GHSA-ggr4-5jxh-37qx

    Affected packages

    Package

    Name: 8jfiesaf83

    Purl: pkg:npm/8jfiesaf83

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1.0.0
    1.0.1
    1.0.2
    1.0.3
    1.0.4
    1.0.5
    1.0.6
    1.0.7
    1.0.8
    1.0.9
    1.0.10
    1.0.11
    MAL-2025-49331 | CVE-DB