MAL-2025-46157

Import Source

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-46157

Published

2025-09-05T17:10:25Z

Modified

2025-09-05T17:10:25Z

Summary

Malicious code in subduction-odin-inflation-private (npm)

Details

The package subduction-odin-inflation-private was found to contain malicious code.

Database specific

{
    "malicious-packages-origins": null
}

Credits

Affected packages

Name: subduction-odin-inflation-private; View open source insights on deps.dev
Purl: pkg:npm/subduction-odin-inflation-private

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/subduction-odin-inflation-private/MAL-2025-46157.json"