jz-native-js-bridge

{"modified":"2026-01-02T21:37:28Z","published":"2025-12-23T08:18:18Z","schema_version":"1.7.4","id":"MAL-2025-192817","summary":"Malicious code in jz-native-js-bridge (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5)\nThe package jz-native-js-bridge was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"jz-native-js-bridge","purl":"pkg:npm/jz-native-js-bridge"},"versions":["114.5.14"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"ee57d8bcf4e4e447f0b30d39a1fcc672e0e62f94a16fdadc59d1bcc0c37b1e15","import_time":"2025-12-24T10:07:24.162688713Z","id":"RLMA-2025-06383","modified_time":"2025-12-23T08:18:18Z","versions":["114.5.14"]},{"source":"amazon-inspector","sha256":"8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5","import_time":"2026-01-02T21:35:50.345962986Z","modified_time":"2026-01-02T21:29:26Z","versions":["114.5.14"]}]}}