MAL-2025-49416

    Dashboard / Malicious Package / MAL-2025-49416

    MAL-2025-49416

    Published: 9 Nov 2025Last Modified: 9 Nov 2025

    Summary: Malicious code in icu-messageformat (npm)

    Details: Source: amazon-inspector (a1fc5a2af1395cc93448f25e96d6c16427b37dfddad7075ec3b9409f012a0346) The package icu-messageformat was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: icu-messageformat

    Purl: pkg:npm/icu-messageformat

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions