json-map-source

MAL-2025-192321

npmmalware12/5/2025
Description

Malicious code in json-map-source (npm)

Indicators of Compromise
SHA256 Hashes (4)
3c10e01cd8946f23f63e8eb210a0de73503e9815cf616aee78f18c96c4fe2ef0
6dd2d0607d185e9c26b9f948e2335066b6e537f3f192794f59fdf55548300006
741c8fd6bf6a0b0e779babcfccc9f35c6af37f632a03f46fde6ad05ceb07a1c4
9f28077aedceff25ea844f178ae414f6beb539b14440e550a0de1d37b50a76e7
References (3)
https://github.com/advisories/GHSA-qfx2-px7q-fq7cOSVhttps://security.snyk.io/vuln/SNYK-JS-JSONMAPSOURCE-14188259OSVhttps://npmjs.com/package/json-map-sourceOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/5/2025
Aliases
GHSA-qfx2-px7q-fq7cSNYK-JS-JSONMAPSOURCE-14188259
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001