MAL-2025-192568

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/vscode/effetmer.darkgpt/MAL-2025-192568.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192568
Published
2025-12-10T00:12:00Z
Modified
2025-12-12T11:07:54.815623Z
Summary
Malicious code in EffetMer.darkgpt (VSCode)
Details

The package downloads and executes a hidden executable from a malicious URL.

Database specific
{
    "malicious-packages-origins": null
}
References
Credits

Affected packages

VSCode / EffetMer.darkgpt

Package

Name
EffetMer.darkgpt

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Database specific

source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/vscode/effetmer.darkgpt/MAL-2025-192568.json"