MAL-2025-191583

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/redirect-5k9q5v/MAL-2025-191583.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-191583
Published
2025-12-01T13:23:05Z
Modified
2025-12-02T21:59:07.802679Z
Summary
Malicious code in redirect-5k9q5v (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (cbc038d322ab58ef55f9713dd3250ed8acb58c774ff1690a234afcdac30d4bb5)

The package redirect-5k9q5v was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.0.1"
            ],
            "sha256": "d263ced21a9efcc02d9a6711c94763fd074add8fad58db4fd96da3d5c2578ca3",
            "modified_time": "2025-12-01T13:23:05Z",
            "source": "reversing-labs",
            "id": "RLMA-2025-05933",
            "import_time": "2025-12-02T09:09:53.542315681Z"
        },
        {
            "versions": [
                "1.0.1"
            ],
            "sha256": "cbc038d322ab58ef55f9713dd3250ed8acb58c774ff1690a234afcdac30d4bb5",
            "modified_time": "2025-12-02T21:11:00Z",
            "source": "amazon-inspector",
            "import_time": "2025-12-02T21:35:53.690291007Z"
        }
    ]
}
References
Credits

Affected packages

npm / redirect-5k9q5v

Package

Name
redirect-5k9q5v
View open source insights on deps.dev
Purl
pkg:npm/redirect-5k9q5v

Affected ranges

Affected versions

1.*
1.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/redirect-5k9q5v/MAL-2025-191583.json"