{"id":"MAL-2025-14109","revision":"552c1cfbd3b94a1da5ac8250c119944a","records":[{"revision":"552c1cfbd3b94a1da5ac8250c119944a","observedAt":"2026-10-29T15:12:22.973+00:00","statement":{"source":"osv","id":"MAL-2025-14109","aliases":[],"title":"Malicious code in adorn (npm)","description":"The package adorn was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2d216a470f43a6fe1d8ad3afea30e01265f3b9d2c25fc6689e296ff7c817489a)\nNo install-time or import-time behavior of concern was observed in this package version. No lifecycle scripts performing network fetch or shell execution, no reads of installer secret paths (~/.aws, ~/.ssh, ~/.npmrc), no environment-variable scraping, no hardcoded attacker-controlled network destinations, no obfuscated payloads, and no silent-relay of caller-supplied data were identified.\n","state":0,"publishedAt":"2025-08-14T18:52:04+00:00","modifiedAt":"2026-10-29T14:45:05.1883171+00:00","affected":[{"ecosystem":"npm","name":"adorn","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":["0.1.0","0.1.1"],"rawVersionEvidence":null}],"metrics":[],"references":["https://www.npmjs.com/package/adorn/v/0.1.0","https://www.npmjs.com/package/adorn/v/0.1.1"],"sourceUrl":"https://osv.dev/vulnerability/MAL-2025-14109","license":"OSV · upstream source license applies","key":"osv:MAL-2025-14109","identifiers":["MAL-2025-14109"]},"retained":false,"historicalAffected":[]}],"coverage":[]}