MAL-2025-191390 Malicious code in ceviz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dfb19a9ba10272dfd3ead68f0cbe940fbaef80738a39e53d44201c3aadc250 The package ceviz was found to contain malicious code. Source: ghsa-malware b6b575b73c5d275b6b6a0f81a03aade8f1e27eabc47214b4a77f300f014b6219 Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...