MAL-2025-55037

    Dashboard / Malicious Package / MAL-2025-55037

    MAL-2025-55037

    Published: 10 Nov 2025Last Modified: 12 Nov 2025

    Summary: Malicious code in hackerone-internal-test (npm)

    Details: Source: amazon-inspector (f16e6417e8eaebc0aa37552f263af3e1445a1a3cb50245074d579c9b818a73e6) The package hackerone-internal-test was found to contain malicious code. Source: ossf-package-analysis (bfdfbd2c4795ff2ac1d19674c5c5fd86667f0315fd25051a34b1761e28840dec) The OpenSSF Package Analysis project identified 'hackerone-internal-test' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: hackerone-internal-test

    Purl: pkg:npm/hackerone-internal-test

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1.0.0