CVE-2025-59330

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

@alfresco/adf-testing (=6.0.0-A.2-8258), @algolia/coquille (>=0.0.2 <=0.0.13) +17 more potentially affected by CVE-2025-59330 via error-ex (>=1.3.1 <=1.3.2)

error-ex NPM version =1.3.1, =0.0.2, =1.2.5, =1.5.0, =1.0.1, =0.1.0, =1.16.0, =0.0.20, =0.1.2, =0.1.3 - beelinejs-todo-mvc =0.1.1 - byte-common =1.0.0 - candlelabssdk =1.0.0 - capacitor-firebase-authentication =1.0.0 and more Source cves: CVE-2025-59330 Source advisory: OSV:MAL-2025-46975...