MAL-2025-41607

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sqrt-bn/MAL-2025-41607.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-41607
Published
2025-08-28T07:41:00Z
Modified
2025-08-28T07:41:00Z
Summary
Malicious code in sqrt-bn (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-04694",
            "import_time": "2025-08-29T06:42:37.267396773Z",
            "sha256": "56d19c8f79316a1d0a8b6c4226b568a4945b7a1f4978d37566aa58c33246d565",
            "source": "reversing-labs",
            "modified_time": "2025-08-28T07:41:00Z",
            "versions": [
                "1.9.8"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / sqrt-bn

Package

Name
sqrt-bn
View open source insights on deps.dev
Purl
pkg:npm/sqrt-bn

Affected ranges

Affected versions

1.*
1.9.8

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sqrt-bn/MAL-2025-41607.json"