MAL-2025-49392

    Dashboard / Malicious Package / MAL-2025-49392

    MAL-2025-49392

    Published: 8 Nov 2025Last Modified: 9 Nov 2025

    Summary: Malicious code in focusync-custom-controls (npm)

    Details: Source: amazon-inspector (83979de8b383c0a28ec2fea476c2842bafabcb6e5abfe06e4253a9c1ab713234) The package focusync-custom-controls was found to contain malicious code. Source: ossf-package-analysis (c2933d1e3c5526eaf0618f3fdb8efeebece10a42e18a3091cb585154c38f9a8c) The OpenSSF Package Analysis project identified 'focusync-custom-controls' @ 99.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: focusync-custom-controls

    Purl: pkg:npm/focusync-custom-controls

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    99.0.0
    MAL-2025-49392 | CVE-DB