MAL-2025-49332

    Dashboard / Malicious Package / MAL-2025-49332

    MAL-2025-49332

    Published: 3 Nov 2025Last Modified: 5 Nov 2025

    Summary: Malicious code in capes-template-angular (npm)

    Details: Source: amazon-inspector (69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2) The package capes-template-angular was found to contain malicious code. Source: ossf-package-analysis (a7c701b53ee921672c1ea257d062b4bddb91b15d7e1960bb7a151f034548656c) The OpenSSF Package Analysis project identified 'capes-template-angular' @ 10.0.7 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: capes-template-angular

    Purl: pkg:npm/capes-template-angular

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.1
    1.0.7
    1.0.5
    MAL-2025-49332 | CVE-DB