Malicious code in @crowdstrike/logscale-parser-edit (npm)

🗓️ 16 Sep 2025 07:48:06Reported by OSSF Malicious PackagesType

ossf🔗 github.com👁 1 Views

Malicious code in crowdstrike logscale parser edit package; postinstall runs bundle.js with unsigned bitwise math.

Vulners

Node

Source	Link
safedep	www.safedep.io/npm-supply-chain-attack-targeting-maintainers/
socket	www.socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages
github	www.github.com/advisories/GHSA-r3mw-cmqp-rqf5
wiz	www.wiz.io/blog/shai-hulud-npm-supply-chain-attack
semgrep	www.semgrep.dev/blog/2025/security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials/
aikido	www.aikido.dev/blog/s1ngularity-nx-attackers-strike-again
stepsecurity	www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised
socket	www.socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages

18 Sep 2025 04:14Current

6.8Medium risk

Vulners AI Score6.8