MAL-2025-49457
Dashboard / Malicious Package / MAL-2025-49457
MAL-2025-49457
Published: 9 Nov 2025Last Modified: 9 Nov 2025
Summary: Malicious code in @secretcollect/identity-core (npm)
Details: Source: amazon-inspector (4ee9013d3035dee1cf9b01baac2850c5852735ea5f18a3fe0863ab8c493131b3) The package @secretcollect/identity-core was found to contain malicious code.
References:
Affected packages
Package
Name: @secretcollect/identity-core
Purl: pkg:npm/%40secretcollect/identity-core
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -None
