VYPR
← All malware advisories

npm · Malicious package advisory

Malware

tna_xmlparser

MAL-2025-192371

Malicious code in tna_xmlparser (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (e70bf55e611d269d207f5ff39c92876d210b2470cd6b84c251eb34e5f3a5448f)
The package tna_xmlparser was found to contain malicious code.

## Source: ossf-package-analysis (9b77a19fbcd280e2d3476df4ce18f5e8ba9a154777f0c2528c99847b5de7db99)
The OpenSSF Package Analysis project identified 'tna_xmlparser' @ 1.0.0 (npm) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.