@mparpaillon/imagesloaded
MAL-2025-190871
npmmalware11/24/2025
Description
Malicious code in @mparpaillon/imagesloaded (npm)
Indicators of Compromise
SHA256 Hashes (2)
733f9cddc9163f876de6db1b1dab8c6325aa55f34f478662321875c52f242ea4
506e977605745b6dcf2edcfac3bf4e93db53a7e8b954f02ea12ea95cdffbef6d
References (5)
https://www.mend.io/blog/shai-hulud-the-second-comingOSVhttps://checkmarx.com/zero-post/shai-huluds-second-coming-npm-malware-attack-evolvedOSVhttps://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomainsOSVhttps://www.veracode.com/blog/return-of-the-shai-hulud-wormOSVhttps://www.reversinglabs.com/blog/another-shai-hulud-npm-worm-is-spreading-heres-what-you-need-to-knowOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Quick Actions