EUVD-2025-199132

Malicious code in just-toasty npm...

MAL-2025-191115 Malicious code in just-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e29f21c9b431c05fbc927b36672514aceaf4b5deb5ebfe79245aca026e11db The package just-toasty was found to contain malicious code. Source: ghsa-malware 2b112074d0da578cf13c8d773ea5076de4fdc7c11511d2af1910c9f63ba3783c An...

Malicious code in just-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e29f21c9b431c05fbc927b36672514aceaf4b5deb5ebfe79245aca026e11db The package just-toasty was found to contain malicious code. Source: ghsa-malware 2b112074d0da578cf13c8d773ea5076de4fdc7c11511d2af1910c9f63ba3783c An...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...