{"id":"MAL-2025-47027","summary":"Malicious code in prebid-universal-creative (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: google-open-source-security (28a458913f2a945444606a3dd030b993b23a6388274a01a2ecdea26478e1b1d9)\nThis package was compromised and malicious code added as part of a phishing\ncampaign.\n","modified":"2025-09-11T03:58:52Z","published":"2025-09-11T03:58:52Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-09-11T03:59:18.960928Z","modified_time":"2025-09-11T03:58:52Z","sha256":"28a458913f2a945444606a3dd030b993b23a6388274a01a2ecdea26478e1b1d9","source":"google-open-source-security","versions":["1.17.3"]}]},"references":[{"type":"ARTICLE","url":"https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised"},{"type":"ARTICLE","url":"https://www.bleepingcomputer.com/news/security/hackers-hijack-npm-packages-with-2-billion-weekly-downloads-in-supply-chain-attack/"},{"type":"ARTICLE","url":"https://snyk.io/blog/npm-supply-chain-attack-via-open-source-maintainer-compromise/"}],"affected":[{"package":{"name":"prebid-universal-creative","ecosystem":"npm","purl":"pkg:npm/prebid-universal-creative"},"versions":["1.17.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/prebid-universal-creative/MAL-2025-47027.json"}}],"schema_version":"1.7.3"}