@hand-talk/yotta-icons

{"modified":"2025-12-23T15:09:26Z","published":"2025-12-03T01:23:28Z","schema_version":"1.7.4","id":"MAL-2025-191950","summary":"Malicious code in @hand-talk/yotta-icons (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (3c045f3fe855bc71b3f6e34b9341c65fc06e25d0ee9ec32d4036dfb3da596e96)\nThe package @hand-talk/yotta-icons was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"@hand-talk/yotta-icons"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["991.0.0"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"amazon-inspector","sha256":"3c045f3fe855bc71b3f6e34b9341c65fc06e25d0ee9ec32d4036dfb3da596e96","import_time":"2025-12-03T01:35:21.970946308Z","modified_time":"2025-12-03T01:23:28Z","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"reversing-labs","sha256":"dc69414cdf139f82a5a1d798a890a64fc5e6931c244d1c3832ac065fa8b9a3be","import_time":"2025-12-23T15:07:37.958788558Z","id":"RLMA-2025-06025","modified_time":"2025-12-23T07:47:36Z","versions":["991.0.0"]}]}}