EUVD-2025-199222

Malicious code in feature-flip npm...

Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

MAL-2025-191091 Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...