{"id":"MAL-2025-3423","summary":"Malicious code in twitterapis (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-TWITTERAPIS-9667370"],"modified":"2025-04-28T06:14:34.775044Z","published":"2025-04-23T16:04:01Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-02451","import_time":"2025-04-25T09:36:42.349456152Z","modified_time":"2025-04-23T16:04:01Z","sha256":"0f8378b6bf16848a2a7728fbd22a25a7d742d8d2436e87b2de3cad461c1c5b6b","source":"reversing-labs","versions":["10.1.0","10.1.1"]}]},"references":[{"type":"ARTICLE","url":"https://socket.dev/blog/lazarus-expands-malicious-npm-campaign-11-new-packages-add-malware-loaders-and-bitbucket"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-TWITTERAPIS-9667370"}],"affected":[{"package":{"name":"twitterapis","ecosystem":"npm","purl":"pkg:npm/twitterapis"},"versions":["10.1.0","10.1.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/twitterapis/MAL-2025-3423.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}