MAL-2025-191579

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/lbank-connector-nodejs/MAL-2025-191579.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-191579
Published
2025-12-01T13:15:08Z
Modified
2025-12-24T10:28:34Z
Summary
Malicious code in lbank-connector-nodejs (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (269534d355daa221c39b34954aedea297175091aaf5ae63fec123b9bea17fa16)

The package lbank-connector-nodejs was found to contain malicious code.

Database specific
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-05826",
            "import_time": "2025-12-02T09:09:48.68043143Z",
            "modified_time": "2025-12-01T13:15:08Z",
            "sha256": "7e5a0b7340a5a9e43ae6bd6244397302ec36b61adb1b3e9b386c158bdc449ac5",
            "source": "reversing-labs",
            "versions": [
                "2.0.0"
            ]
        },
        {
            "import_time": "2025-12-02T21:35:54.231746463Z",
            "modified_time": "2025-12-02T21:11:00Z",
            "sha256": "269534d355daa221c39b34954aedea297175091aaf5ae63fec123b9bea17fa16",
            "source": "amazon-inspector",
            "versions": [
                "2.0.0"
            ]
        },
        {
            "id": "RLUA-2025-06396",
            "import_time": "2025-12-24T10:07:34.988049816Z",
            "modified_time": "2025-12-23T08:19:01Z",
            "sha256": "e00e26a5d7f62f38e155e17f33fc897103660ddca33e48e8355d63b6fabbf50c",
            "source": "reversing-labs",
            "versions": [
                "1.0.0"
            ]
        }
    ]
}
Credits

Affected packages

npm / lbank-connector-nodejs

Package

Name
lbank-connector-nodejs
View open source insights on deps.dev
Purl
pkg:npm/lbank-connector-nodejs

Affected ranges

Affected versions

1.*
1.0.0
2.*
2.0.0

Database specific

source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/lbank-connector-nodejs/MAL-2025-191579.json"