MalwarePublished 9 Nov 2025

erbankbackdoor (npm) · Malicious Code

Affects erbankbackdoorSource GCVE Database

Malicious package : remove erbankbackdoor and rotate any secrets on hosts that installed it.

Data as of 4 Nov 2026, 18:55 UTC

Classification

Malicious package

Published to npm · OSV MAL-2025-49405

What to do

Remove erbankbackdoor from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmerbankbackdoor	Affected–	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package 'erbankbackdoor' was identified as containing malicious code. No specific technical details, affected versions, or exploitation information are provided.

Impact

The presence of malicious code in a package can lead to compromise of systems that install or use it. However, no specific impact details or exploitation in the wild are reported.

Defensive guidance

Review dependencies for this package and remove or replace it if found.

Summary

The package 'erbankbackdoor' in the npm ecosystem has been found to include malicious code according to Amazon Inspector source data. There are no details on the nature of the malicious code, its behavior, or impact.

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 4 Nov 2026, 18:55 UTC

Technical details

Community reviews