MAL-2025-22146

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/halmos-cheatcodes/MAL-2025-22146.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-22146
Published
2025-08-14T18:52:04Z
Modified
2025-09-26T11:06:45Z
Summary
Malicious code in halmos-cheatcodes (npm)
Details

The package halmos-cheatcodes was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-04555",
            "import_time": "2025-08-29T06:42:24.297126887Z",
            "modified_time": "2025-08-28T07:30:18Z",
            "sha256": "3dd35e3091e73509fe21a3bab1126b6558eef58100c2431f49fa5f2c78fc5ec7",
            "source": "reversing-labs",
            "versions": [
                "1.0.1"
            ]
        },
        {
            "id": "RLUA-2025-05030",
            "import_time": "2025-09-26T11:06:12.154328932Z",
            "modified_time": "2025-09-26T09:33:00Z",
            "sha256": "f6b62c80a8979949d5094d2fe9fa1e3b155ae0b915562c45bc962d49b9556916",
            "source": "reversing-labs",
            "versions": [
                "1.0.0"
            ]
        }
    ]
}
Credits

Affected packages

npm / halmos-cheatcodes

Package

Name
halmos-cheatcodes
View open source insights on deps.dev
Purl
pkg:npm/halmos-cheatcodes

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.0
1.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/halmos-cheatcodes/MAL-2025-22146.json"