MAL-2025-192810

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jsonauthcap/MAL-2025-192810.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192810
Aliases
  • SNYK-JS-JSONAUTHCAP-14152264
Published
2025-12-23T08:17:59Z
Modified
2026-03-19T12:45:15Z
Summary
Malicious code in jsonauthcap (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9dc3cf4a42e484d8f5f45422c109e11752cd6a37179357c39c8e3ce8b65e0b46)

The package jsonauthcap was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-06376",
            "import_time": "2025-12-24T10:07:23.905371453Z",
            "modified_time": "2025-12-23T08:17:59Z",
            "sha256": "a4114af551ace62f174d96fabc6f6aed893fdeff7c2b07f7f8bd0c96699eb1b1",
            "source": "reversing-labs",
            "versions": [
                "7.2.7"
            ]
        },
        {
            "import_time": "2026-01-02T21:35:52.182468521Z",
            "modified_time": "2026-01-02T21:29:26Z",
            "sha256": "9dc3cf4a42e484d8f5f45422c109e11752cd6a37179357c39c8e3ce8b65e0b46",
            "source": "amazon-inspector",
            "versions": [
                "7.2.7"
            ]
        },
        {
            "id": "RLUA-2026-01373",
            "import_time": "2026-03-19T12:20:55.12262317Z",
            "modified_time": "2026-03-18T12:56:05Z",
            "sha256": "e69edf627c2d9d4cec636e78cb878edbc8025c59e0d50d53aa14b1a32f316811",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / jsonauthcap

Package

Name
jsonauthcap
View open source insights on deps.dev
Purl
pkg:npm/jsonauthcap

Affected ranges

Affected versions

7.*
7.2.7

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jsonauthcap/MAL-2025-192810.json"