bignumex

MAL-2025-192574

npmmalware12/15/2025
Description

Malicious code in bignumex (npm)

Indicators of Compromise
SHA256 Hashes (5)
32884ff132ca375f235dd1d6e843a3178d5777c11127c3f8f155472d2f26a455
c839a719fb3ac340e251cb4eb34af0d9240de8d7e9f13605963617d9e14929b3
275045db8764849b9c0183d000d56de04b464b2a88c9239e87faaa6eed865dd1
f61b10a17a23d1abf0c55b508c3bb07e96f44ed23e268b25f5cd9e2a9ba90ba7
53aeac274d2b6d83f67cc18c97426f42c3d07336196a26b4d0f86f8a13eda905
References (4)
https://github.com/advisories/GHSA-cvwj-6h92-w2cpOSVhttps://npmjs.com/package/bignumexOSVhttps://security.snyk.io/vuln/SNYK-JS-BIGNUMEX-14417296OSVhttps://www.reversinglabs.com/blog/inside-graphalgoOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/15/2025
Aliases
GHSA-cvwj-6h92-w2cpSNYK-JS-BIGNUMEX-14417296
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001