npm · Malicious package advisory
Malwareexpress-cookie-parser
MAL-2025-3541
Malicious code in express-cookie-parser (npm)
Details
This package impersonates the popular 'cookie-parser' package. Remote code execution, persistence, self-deletion, and obfuscation found in the package's code confirm its malicious nature.