MAL-2025-6896

    Dashboard / Malicious Package / MAL-2025-6896

    MAL-2025-6896

    Published: 18 Aug 2025Last Modified: 22 Aug 2025

    Summary: Malicious code in com.db.spain.common.fif.ngx-fusion-ufe (npm)

    Details: The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis (30f0038c395e91d1add11ecd9f7f4784ac0fdf7c472e6ca9003c3d69ae35e031) The OpenSSF Package Analysis project identified 'com.db.spain.common.fif.ngx-fusion-ufe' @ 2.2.8 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: com.db.spain.common.fif.ngx-fusion-ufe

    Purl: pkg:npm/com.db.spain.common.fif.ngx-fusion-ufe

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 2.2.7
    Fixed -None

    Affected versions

    2.2.8
    2.2.9