CVE-2025-59330 [email protected] contains malware after npm account takeover

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

CVE-2025-59330 [email protected] contains malware after npm account takeover

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

CVE-2025-59330

The CVE-2025-59330 entry concerns the npm package error-ex . A phishing-driven takeover of its publishing account led to version 1.3.3 containing a malware payload that attempts to redirect cryptocurrency transactions from browser environments (e.g., MetaMask) to attacker addresses. Local/server/...

CVE-2025-59330 [email protected] contains malware after npm account takeover

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

node-error-ex 安全漏洞

node-error-ex is a library by Josh Junon Personal Developer. A security vulnerability exists in node-error-ex version 1.3.3, which stems from a phishing attack resulting in an account takeover, and a malicious version that contains a specially crafted payload that could redirect cryptocurrency...

MAL-2025-46975 Malicious code in error-ex (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in error-ex (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @crabas0npm/eveniet-ex-eveniet (npm)

The package @crabas0npm/eveniet-ex-eveniet was found to contain malicious code...

Malicious code in @crabas0npm/ex-iste-optio-sunt (npm)

The package @crabas0npm/ex-iste-optio-sunt was found to contain malicious code...

MAL-2025-42786 Malicious code in @teamteanpm2024/ex-consectetur-earum (npm)

The package @teamteanpm2024/ex-consectetur-earum was found to contain malicious code...

MAL-2025-42256 Malicious code in @crabas0npm/eveniet-ex-eveniet (npm)

The package @crabas0npm/eveniet-ex-eveniet was found to contain malicious code...

MAL-2025-42623 Malicious code in @kollorg/ex-doloremque-sint (npm)

The package @kollorg/ex-doloremque-sint was found to contain malicious code...

Malicious code in @kollorg/ex-doloremque-sint (npm)

The package @kollorg/ex-doloremque-sint was found to contain malicious code...

MAL-2025-42534 Malicious code in @hishpr/eos-iste-ex (npm)

The package @hishpr/eos-iste-ex was found to contain malicious code...

Malicious code in @dramateas/sequi-ex-id-sit (npm)

The package @dramateas/sequi-ex-id-sit was found to contain malicious code...

Malicious code in @teamteanpm2024/ex-consectetur-earum (npm)

The package @teamteanpm2024/ex-consectetur-earum was found to contain malicious code...

Malicious code in @hishpr/eos-iste-ex (npm)

The package @hishpr/eos-iste-ex was found to contain malicious code...

MAL-2025-42903 Malicious code in @teamteanpm2024/tempora-ex-explicabo (npm)

The package @teamteanpm2024/tempora-ex-explicabo was found to contain malicious code...

MAL-2025-42257 Malicious code in @crabas0npm/ex-iste-optio-sunt (npm)

The package @crabas0npm/ex-iste-optio-sunt was found to contain malicious code...

CVE-2025-30064

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...