MAL-2025-49451

    Dashboard / Malicious Package / MAL-2025-49451

    MAL-2025-49451

    Published: 9 Nov 2025Last Modified: 9 Nov 2025

    Summary: Malicious code in xmlparserattack (npm)

    Details: Source: amazon-inspector (ca1ad789257af9fd4bf531151e47a178d2dda1e643b751d2aa418fdf777c619d) The package xmlparserattack was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: xmlparserattack

    Purl: pkg:npm/xmlparserattack

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions