libxmlaboba

GHSA-5p55-42wc-fg5v

Malicious code in libxmlaboba (npm)

Details

**Severity:** Critical

**Affected versions:** `= 0.30.2`

## Source: amazon-inspector (05a7df278a8ac96b2c657db06cba777fda3bb1a02a55961d7cf8d944b99a8c33)
The package libxmlaboba was found to contain malicious code.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/934165475d54679a7cd445f025bb8c97422cc949/osv/malicious/npm/libxmlaboba/MAL-2026-1771.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/934165475d54679a7cd445f025bb8c97422cc949/osv/malicious/npm/libxmlaboba/MAL-2026-1771.json
- https://github.com/advisories/GHSA-5p55-42wc-fg5v

Compromised versions (1)

= 0.30.2

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.