MAL-2025-15924

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/boby_parser/MAL-2025-15924.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-15924
Aliases
  • SNYK-JS-BOBYPARSER-13561241
Published
2025-08-14T18:52:04Z
Modified
2025-12-02T10:14:45.445393Z
Summary
Malicious code in boby_parser (npm)
Details

The package boby_parser was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "ba2a1d616dacefe23c0d8b67fd76769bd2d9d91480a0f684adf8380f8bba5f6f",
            "modified_time": "2025-08-28T07:23:16Z",
            "versions": [
                "2.2.0",
                "2.2.2",
                "2.2.3"
            ],
            "source": "reversing-labs",
            "id": "RLMA-2025-04466",
            "import_time": "2025-08-29T06:42:15.362660713Z"
        },
        {
            "modified_time": "2025-12-01T13:04:38Z",
            "sha256": "27b04e5dbe3ecfb8c414ab4247433b568f221755a2d21542001718ef6d4c5ec7",
            "source": "reversing-labs",
            "id": "RLUA-2025-05693",
            "import_time": "2025-12-02T09:10:01.680575748Z"
        }
    ]
}
References
Credits

Affected packages

npm / boby_parser

Package

Name
boby_parser
View open source insights on deps.dev
Purl
pkg:npm/boby_parser

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.2.0
2.2.2
2.2.3

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/boby_parser/MAL-2025-15924.json"