MAL-2025-3084

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/daos.fun/MAL-2025-3084.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-3084
Published
2025-04-03T11:50:56Z
Modified
2025-04-03T20:36:51Z
Summary
Malicious code in daos.fun (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (c3582de1eae498ceb9a9140eb179769f16eee1f84de019f90122ccd1f05f5ebd)

The OpenSSF Package Analysis project identified 'daos.fun' @ 0.1.1 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "c3582de1eae498ceb9a9140eb179769f16eee1f84de019f90122ccd1f05f5ebd",
            "import_time": "2025-04-03T12:09:18.475774298Z",
            "versions": [
                "0.1.1"
            ],
            "source": "ossf-package-analysis",
            "modified_time": "2025-04-03T11:50:56Z"
        },
        {
            "sha256": "a87031c86d27151f3abd1940c5d44e565355893c08f687ba8f5f3fe29b9816b2",
            "import_time": "2025-04-03T20:36:20.588876737Z",
            "versions": [
                "0.1.3"
            ],
            "source": "ossf-package-analysis",
            "modified_time": "2025-04-03T20:31:11Z"
        }
    ]
}
References
Credits

Affected packages

npm / daos.fun

Package

Name
daos.fun
View open source insights on deps.dev
Purl
pkg:npm/daos.fun

Affected ranges

Affected versions

0.*

0.1.1
0.1.3