MAL-2025-192710

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/amournapraia/MAL-2025-192710.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192710
Published
2025-12-23T07:56:20Z
Modified
2025-12-24T01:13:34.863296Z
Summary
Malicious code in amournapraia (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b6115eb1144d405cc399b25ccccf0fcc95a9ff056e925b0fe7d8bb4543f3b9dd)

The package amournapraia was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "f21c0cdfd08f8d5ff6af2eefff849350d0527a3e006f185178abbda3748e61f8",
            "source": "reversing-labs",
            "modified_time": "2025-12-23T07:56:20Z",
            "id": "RLMA-2025-06060",
            "versions": [
                "1.0.0"
            ],
            "import_time": "2025-12-23T15:39:08.649297806Z"
        },
        {
            "sha256": "b6115eb1144d405cc399b25ccccf0fcc95a9ff056e925b0fe7d8bb4543f3b9dd",
            "source": "amazon-inspector",
            "modified_time": "2025-12-24T00:41:11Z",
            "versions": [
                "1.0.0"
            ],
            "import_time": "2025-12-24T00:51:43.073076396Z"
        }
    ]
}
References
Credits

Affected packages

npm / amournapraia

Package

Name
amournapraia
View open source insights on deps.dev
Purl
pkg:npm/amournapraia

Affected ranges

Affected versions

1.*
1.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/amournapraia/MAL-2025-192710.json"