logo

Database

Use of software with malware In typescript-sort-keys

Description

Malicious code in typescript-sort-keys (npm)

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package

Aliases

1. https://github.com/advisories/MAL-2025-490602. GHSA-r79j-8fhq-m8jq3. GCVE-MAL-2025-49060

References

1. https://www.koi.ai/blog/phantomraven-npm-malware-hidden-in-invisible-dependencies

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.