bigmathlib

MAL-2025-192598

npmmalware12/16/2025
Description

Malicious code in bigmathlib (npm)

Indicators of Compromise
SHA256 Hashes (4)
d73c91abd6a323d119e598928fc613100786424177806e36bb5ebd15f666de3e
29e535ed570f999285684c4f2a79ce262d460a98329790e34f433542070b9298
157806e0ddbbb53441e47fc94c975c21dbfd2c007f59408a9b536388a062054e
2f6ae20d092678f9f19505b07e8281838985707de89e59b85ab9312967e0b5e5
References (4)
https://github.com/advisories/GHSA-5mv4-pjx6-7x42OSVhttps://npmjs.com/package/bigmathlibOSVhttps://security.snyk.io/vuln/SNYK-JS-BIGMATHLIB-14423941OSVhttps://www.reversinglabs.com/blog/inside-graphalgoOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/16/2025
Aliases
GHSA-5mv4-pjx6-7x42SNYK-JS-BIGMATHLIB-14423941
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001