{"id":"MAL-2025-27124","summary":"Malicious code in naya-flore (npm)","details":"The package naya-flore was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-NAYAFLORE-11800941"],"modified":"2025-08-29T07:14:32.646344Z","published":"2025-08-14T18:52:04Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2025-08-28T07:34:18Z","sha256":"1adca6ca240e271077266382bf44a66c01b5cdd7b0c524dbbdfcdb2433065259","source":"reversing-labs","versions":["4.7.1","4.7.2","4.7.3","4.7.4","4.7.5","4.7.6"],"id":"RLMA-2025-04603","import_time":"2025-08-29T06:42:28.495758901Z"}]},"references":[{"type":"ARTICLE","url":"https://socket.dev/blog/malicious-npm-packages-target-whatsapp-developers-with-remote-kill-switch"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/naya-flore"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/node-smsk"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/nvlore-hsc"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-NAYAFLORE-11800941"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@veryflore/disc"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/very-nay"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/naya-clone"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/nouku-search"}],"affected":[{"package":{"name":"naya-flore","ecosystem":"npm","purl":"pkg:npm/naya-flore"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["4.7.1","4.7.2","4.7.3","4.7.4","4.7.5","4.7.6"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/naya-flore/MAL-2025-27124.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}