calc-loan-interest
MAL-2025-190834
npmmalware11/24/2025
Description
Malicious code in calc-loan-interest (npm)
Indicators of Compromise
SHA256 Hashes (3)
fddf133f07cb72011d7bcea13e37eef6fa7a63818fa91c980ebbe99350a1435b
6ea88e110d3bd8cf01c5ec0212632ca3ca8217353b942219b51a9ba53887fb43
78b911fa90fa11184950f21fa420a6b8b490ed46a5fa34514fce8fff429106a9
References (4)
https://github.com/advisories/GHSA-cpq4-j5hc-3hw3OSVhttps://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomainsOSVhttps://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attackOSVhttps://www.stepsecurity.io/blog/sha1-hulud-the-second-coming-zapier-ens-domains-and-other-prominent-npm-packages-compromisedOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Aliases
GHSA-cpq4-j5hc-3hw3
Quick Actions