MAL-2025-192803

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/init-router/MAL-2025-192803.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192803
Aliases
  • SNYK-JS-INITROUTER-14152257
Published
2025-12-23T08:16:47Z
Modified
2026-03-19T12:44:55.429645Z
Summary
Malicious code in init-router (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (0d018c8963d1a91fc672bfe128a7699635fb3dd34a7df393119baee24d44a3d0)

The package init-router was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2025-12-23T08:16:47Z",
            "versions": [
                "2.0.1"
            ],
            "sha256": "030bd01686162e88a70c6036c21aedaaafb115ed74516ba93338d345d18942ff",
            "id": "RLMA-2025-06365",
            "source": "reversing-labs",
            "import_time": "2025-12-23T22:38:31.299197425Z"
        },
        {
            "modified_time": "2025-12-24T00:41:11Z",
            "versions": [
                "2.0.1"
            ],
            "sha256": "0d018c8963d1a91fc672bfe128a7699635fb3dd34a7df393119baee24d44a3d0",
            "source": "amazon-inspector",
            "import_time": "2025-12-24T00:51:44.012039537Z"
        },
        {
            "modified_time": "2026-03-18T12:54:41Z",
            "sha256": "311d6164d4a3d0848081d514d7a7df50220d42cd9b2f56df2c75992f24d3d686",
            "id": "RLUA-2026-01353",
            "source": "reversing-labs",
            "import_time": "2026-03-19T12:20:54.574571691Z"
        }
    ]
}
References
Credits

Affected packages

npm / init-router

Package

Name
init-router
View open source insights on deps.dev
Purl
pkg:npm/init-router

Affected ranges

Affected versions

2.*
2.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/init-router/MAL-2025-192803.json"