EUVD-2025-59145

Malicious code in indah-takokak67-sluey npm...

CVE-2025-59145

color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing attack. Version 2.0.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrenc...

CVE-2025-59145 [email protected] contains malware after npm account takeover

color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing attack. Version 2.0.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrenc...

CVE-2025-59145

creationtimestamp| type| source ---|---|--- 2025-09-15 19:21:19+00:00| seen| https://bsky.app/profile/bad-at-computer.bsky.social/post/3lyvjo7ma7c2n 2025-09-15 21:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyvphwwomm2i 2025-09-20 21:19:46+00:00| seen|...