@profmego/alipay-babyblue

MAL-2025-190558

npmmalware11/18/2025
Description

Malicious code in @profmego/alipay-babyblue (npm)

Indicators of Compromise
SHA256 Hashes (2)
217055654d33343ff6511b892932e8dcaf621df99437dc52124f98c103b3eda8
a640706a6ca7c325d86d9abee284d9184571e6208ddfd48190d12f62e5227e23
References (1)
https://github.com/advisories/GHSA-7w8p-r52j-w959OSV
Details
Ecosystemnpm
Attack Typemalware
Published11/18/2025
Aliases
GHSA-7w8p-r52j-w959
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001