npm

cfruitmaliciousxmlparser @0.30.1

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC

Malicious

OSV ID

MAL-2025-192546

Ecosystem

npm

Summary

The package cfruitmaliciousxmlparser was found to contain malicious code.

Source: amazon-inspector (2e5eaaf8ade83c339f3b0892ac216af2a8acd0ff78ba33498568eae45f6cf905)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.