MAL-2025-27562

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nit-quotation-service-core-lib/MAL-2025-27562.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-27562
Published
2025-08-14T18:52:04Z
Modified
2025-09-26T11:06:45Z
Summary
Malicious code in nit-quotation-service-core-lib (npm)
Details

The package nit-quotation-service-core-lib was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2025-08-29T06:42:28.956061578Z",
            "id": "RLMA-2025-04609",
            "versions": [
                "1.0.1-SNAPSHOT.32",
                "1.0.1-SNAPSHOT.33",
                "1.0.1-SNAPSHOT.34",
                "1.0.1-SNAPSHOT.35",
                "1.0.1-SNAPSHOT.36",
                "1.0.1-SNAPSHOT.37",
                "1.0.1-SNAPSHOT.38",
                "1.0.4",
                "1.0.5",
                "1.0.6",
                "1.0.7",
                "1.0.8"
            ],
            "source": "reversing-labs",
            "modified_time": "2025-08-28T07:34:31Z",
            "sha256": "5ac49036b20bd95b27db121bedb9d082525a627ba4f49915d93bd128976efa65"
        },
        {
            "import_time": "2025-09-26T11:06:12.583475956Z",
            "id": "RLUA-2025-05085",
            "versions": [
                "1.0.2",
                "1.0.3"
            ],
            "source": "reversing-labs",
            "modified_time": "2025-09-26T09:37:31Z",
            "sha256": "7ed2576f3d2c1f53cd5dcad4a35fca4bc4336fb4f144709177186bca07ab885f"
        }
    ]
}
References
Credits

Affected packages

npm / nit-quotation-service-core-lib

Package

Name
nit-quotation-service-core-lib
View open source insights on deps.dev
Purl
pkg:npm/nit-quotation-service-core-lib

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.1-SNAPSHOT.32
1.0.1-SNAPSHOT.33
1.0.1-SNAPSHOT.34
1.0.1-SNAPSHOT.35
1.0.1-SNAPSHOT.36
1.0.1-SNAPSHOT.37
1.0.1-SNAPSHOT.38
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nit-quotation-service-core-lib/MAL-2025-27562.json"