Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190862 Malicious code in zuper-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a0f9381a4c5030be93c471e6489c9de683e8c9e2ab2872d8db32583c4fc35e The package zuper-stream was found to contain malicious code. Source: ghsa-malware 123b2f89234617b4d3a0968f699b3cd51545e8d268e5fc793b393f71645c4784 A...

EUVD-2025-198814

Malicious code in zuper-stream npm...

Malicious code in zuper-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a0f9381a4c5030be93c471e6489c9de683e8c9e2ab2872d8db32583c4fc35e The package zuper-stream was found to contain malicious code. Source: ghsa-malware 123b2f89234617b4d3a0968f699b3cd51545e8d268e5fc793b393f71645c4784 A...