MAL-2025-3786

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/volkswagen-onehub-components-raj/MAL-2025-3786.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-3786
Published
2025-05-14T13:57:57Z
Modified
2025-05-19T02:12:39Z
Summary
Malicious code in volkswagen-onehub-components-raj (npm)
Details

The package communicates with a domain associated with malicious activity.

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (c6a188821a8fcc9aba3c1c6731edb7d72a5fb18997b43678070ad3234057f807)

The OpenSSF Package Analysis project identified 'volkswagen-onehub-components-raj' @ 70.0.1 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "c6a188821a8fcc9aba3c1c6731edb7d72a5fb18997b43678070ad3234057f807",
            "modified_time": "2025-05-14T13:57:57Z",
            "versions": [
                "70.0.1"
            ],
            "source": "ossf-package-analysis",
            "import_time": "2025-05-14T14:06:32.714052348Z"
        }
    ]
}
References
Credits

Affected packages

npm / volkswagen-onehub-components-raj

Package

Name
volkswagen-onehub-components-raj
View open source insights on deps.dev
Purl
pkg:npm/volkswagen-onehub-components-raj

Affected ranges

Type
SEMVER
Events
Introduced
70.0.1

Affected versions

70.*
70.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/volkswagen-onehub-components-raj/MAL-2025-3786.json"