MAL-2025-49341

    Dashboard / Malicious Package / MAL-2025-49341

    MAL-2025-49341

    Published: 3 Nov 2025Last Modified: 3 Nov 2025

    Summary: Malicious code in mercury-composable (npm)

    Details: Source: amazon-inspector (dae0bbe9358cdd9f785cb91ea194f7e1e9ffa315bca07c6894651b5cfb45b865) The package mercury-composable was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: mercury-composable

    Purl: pkg:npm/mercury-composable

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    5.0.8
    5.0.9
    MAL-2025-49341 | CVE-DB