MAL-2025-192271

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@bhyolken/echotest/MAL-2025-192271.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192271
Published
2025-12-03T19:34:54Z
Modified
2025-12-23T15:48:14.299461Z
Summary
Malicious code in @bhyolken/echotest (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (3f892e3f11e25c8e53cb0d01901d0e5f6651888b1d6e29d64da4f0b5b85660eb)

The package @bhyolken/echotest was found to contain malicious code.

Source: ossf-package-analysis (1e629126b1c5a4e3de27b1e8fa4c31f43eea17d846723e2d12e5d7d3fce7d2af)

The OpenSSF Package Analysis project identified '@bhyolken/echotest' @ 1.1.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "3f892e3f11e25c8e53cb0d01901d0e5f6651888b1d6e29d64da4f0b5b85660eb",
            "import_time": "2025-12-03T19:36:12.71891584Z",
            "source": "amazon-inspector",
            "modified_time": "2025-12-03T19:34:54Z",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "SEMVER"
                }
            ]
        },
        {
            "sha256": "1e629126b1c5a4e3de27b1e8fa4c31f43eea17d846723e2d12e5d7d3fce7d2af",
            "import_time": "2025-12-03T20:08:02.857202416Z",
            "source": "ossf-package-analysis",
            "modified_time": "2025-12-03T19:40:29Z",
            "versions": [
                "1.1.0"
            ]
        },
        {
            "sha256": "6b513e10d4bba263d887f98b6f26951670b1d18386a6044c83c601516030c0c7",
            "import_time": "2025-12-03T20:40:03.793224154Z",
            "source": "ossf-package-analysis",
            "modified_time": "2025-12-03T20:25:58Z",
            "versions": [
                "1.4.0"
            ]
        },
        {
            "id": "RLMA-2025-06012",
            "import_time": "2025-12-23T15:07:37.505961055Z",
            "sha256": "a7c1625bb940754fef6e27469a2a638b83d81b106a5ad1fbd36154256876ad95",
            "modified_time": "2025-12-23T07:44:51Z",
            "source": "reversing-labs",
            "versions": [
                "1.0.0",
                "1.4.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / @bhyolken/echotest

Package

Name
@bhyolken/echotest
View open source insights on deps.dev
Purl
pkg:npm/%40bhyolken/echotest

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.0
1.1.0
1.4.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@bhyolken/echotest/MAL-2025-192271.json"