logo

Database

Use of software with malware In io.github.leetcrunch:scribejava-core

Description

Malicious code in io.github.leetcrunch:scribejava-core (Maven)

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Aliases

1. OSV-MAL-2025-25522. GCVE-MAL-2025-2552

References

1. https://socket.dev/blog/malicious-maven-package-exfiltrates-oauth-credentials

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.