@mparpaillon/page
MAL-2025-190872
npmmalware11/24/2025
Description
Malicious code in @mparpaillon/page (npm)
Indicators of Compromise
SHA256 Hashes (2)
fbc632dc769c1c17211f5a14d8e9f40217a70b214e5a367f0ab8fccc939332a1
b27da92201393052dbce684f17cec3c9bc9d87c220a7b7658c31aa62953d2d05
References (4)
https://checkmarx.com/zero-post/shai-huluds-second-coming-npm-malware-attack-evolvedOSVhttps://www.veracode.com/blog/return-of-the-shai-hulud-wormOSVhttps://www.reversinglabs.com/blog/another-shai-hulud-npm-worm-is-spreading-heres-what-you-need-to-knowOSVhttps://research.jfrog.com/post/shai-hulud-the-second-comingOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Quick Actions