Malicious code in ids-enterprise-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae15f729fa23d65989e0f3873d023de175ecf54bb2b230df46861c246bf7df The package ids-enterprise-ng was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199142

Malicious code in ids-enterprise-ng npm...

MAL-2025-191108 Malicious code in ids-enterprise-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae15f729fa23d65989e0f3873d023de175ecf54bb2b230df46861c246bf7df The package ids-enterprise-ng was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

ids-enterprise-ng (>=4.7.0 <=9.5.2), sohoreact (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via ids-enterprise (>=4.10.0-beta.0 <=4.18.1)

ids-enterprise NPM version =4.10.0-beta.0, =4.7.0, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-49R3-3H96-RWJ6...