CVE-2025-59330

error-ex: error-ex: npm account takeover leads to malware

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 16, 2025

Updated · October 27, 2026

Description

A flaw was found in error-ex. This vulnerability allows for cryptocurrency transaction redirection via an npm account takeover and the publication of a malicious package version.

Statement

No Red Hat products use any compromised version of the impacted package(s). For more details see https://access.redhat.com/security/supply-chain-attacks-NPM-packages

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-506 · Embedded Malicious Code