EUVD-2025-199292

Malicious code in @silgi/drizzle npm...

Malicious code in @silgi/drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2e7d01c383c77ebeddc3e05fac0d15335e412587dc2581a75f3406fdbf8fa The package @silgi/drizzle was found to contain malicious code. Source: ghsa-malware e8e9c9c9355daf84cb6c98baa093fe99abde3b51f58854ac5d4934752d55a9a3...

MAL-2025-191312 Malicious code in @silgi/drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2e7d01c383c77ebeddc3e05fac0d15335e412587dc2581a75f3406fdbf8fa The package @silgi/drizzle was found to contain malicious code. Source: ghsa-malware e8e9c9c9355daf84cb6c98baa093fe99abde3b51f58854ac5d4934752d55a9a3...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...