MAL-2025-1682

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/3952955c8e968410/MAL-2025-1682.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-1682
Aliases
  • GHSA-6rcm-f7p3-q42r
Published
2025-03-03T13:14:33Z
Modified
2026-09-01T11:30:40Z
Summary
Malicious code in 3952955c8e968410 (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-00586",
            "import_time": "2025-03-03T15:06:17.297241177Z",
            "modified_time": "2025-03-03T13:14:33Z",
            "sha256": "af4b46d56b6a3ff36ce41a3b3fe892cdb9f67686d701e41ca6cec021e0826bf2",
            "source": "reversing-labs",
            "versions": [
                "0.9.4-ea.28"
            ]
        },
        {
            "id": "RLUA-2026-05953",
            "import_time": "2026-09-01T11:17:46.9425249Z",
            "modified_time": "2026-08-24T16:34:58Z",
            "sha256": "05624a503bbe31cde784000bde1b02aa213912ed628fbda3028797dfc9b6b849",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / 3952955c8e968410

Package

Name
3952955c8e968410
View open source insights on deps.dev
Purl
pkg:npm/3952955c8e968410

Affected ranges

Affected versions

0.*
0.9.4-ea.28

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/3952955c8e968410/MAL-2025-1682.json"