MAL-2025-6020

    Dashboard / Malicious Package / MAL-2025-6020

    MAL-2025-6020

    Published: 22 Jul 2025Last Modified: 22 Jul 2025

    Summary: Malicious code in is (npm)

    Details: Source: google-open-source-security (a1baf574e6278b3c20c30fdd7875414ed04c1a695eb226fd43328004c6916873) "is" had unauthorized new versions published that contained malicious obfuscated code via account compromise.

    References: https://github.com/enricomarino/is/commit/0fe137a5946e4ecb0e649bd7dea48d5415a242fc

    Affected packages

    Package

    Name: is

    Purl: pkg:npm/is

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    3.3.1
    MAL-2025-6020 | CVE-DB