MAL-2025-49348

    Dashboard / Malicious Package / MAL-2025-49348

    MAL-2025-49348

    Published: 3 Nov 2025Last Modified: 9 Nov 2025

    Summary: Malicious code in antora-navigator-extension (npm)

    Details: Source: amazon-inspector (ea546d0e4728489bf022620518fcacbdeead708393058151148b3434c4651256) The package antora-navigator-extension was found to contain malicious code. Source: ossf-package-analysis (1b7ebe8c5889ca52b10b296f3db9e3dbfc1472e4f756806c55a8c789b53b2353) The OpenSSF Package Analysis project identified 'antora-navigator-extension' @ 99.99.98 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: antora-navigator-extension

    Purl: pkg:npm/antora-navigator-extension

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.98
    99.99.99