MAL-2025-5650

    Dashboard / Malicious Package / MAL-2025-5650

    MAL-2025-5650

    Published: 7 Jul 2025Last Modified: 7 Jul 2025

    Summary: Malicious code in @virtru-private/infer-web-env (npm)

    Details: Source: ossf-package-analysis (35f7301737b56efc07185c2e65de66ae841fe901ca967f2ad2d7406d9379cdcc) The OpenSSF Package Analysis project identified '@virtru-private/infer-web-env' @ 99.9.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @virtru-private/infer-web-env

    Purl: pkg:npm/%40virtru-private/infer-web-env

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.9.9
    MAL-2025-5650 | CVE-DB