VDB
MAL-2025-192968
MAL-2025-192968
PUBLISHED
Malicious code in express-js-web (npm)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | express-js-web | 0, 0 |
Timeline
- Dec 30, 2025 CVE Published
- Jan 2, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-wpr4-9cjg-p8mm vendor-advisory