Analyze your own packages withvet GitHub

mongodb@6.20.0

Suspicious
Analyzed at:9/18/2025, 3:32:17 PM
Source:https://registry.npmjs.org/mongodb/-/mongodb-6.20.0.tgz
SHA256:a12bd599cb4f39cdf222b32380ea3efd1f60c6d88615e0700632a303a9006b02
Confidence:Medium
Summary

This analysis was performed using vet and SafeDep Cloud Malicious Package Analysis. Integrate with GitHub using vet-action GitHub Action.

Hardcoded proxy settings ('iLoveJavaScript', port 0) suggest malicious intent, potentially leading to MitM attacks. Package is classified as malware.

Details

The package contains hardcoded proxy settings with the hostname 'iLoveJavaScript' and port 0 in multiple files (connect.js, state_machine.js). This is highly suspicious and indicative of malicious intent, potentially designed to misconfigure proxy connections or redirect traffic through an unintended server, leading to a Man-in-the-Middle attack.