MAL-2025-48635

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhemrdhs92007/MAL-2025-48635.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-48635

Published

2025-10-26T19:03:27Z

Modified

2025-12-02T10:09:21.873883Z

Summary

Malicious code in dhemrdhs92007 (npm)

Details

The package dhemrdhs92007 was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-02T09:09:44.590678559Z",
            "id": "RLMA-2025-05733",
            "versions": [
                "1.250613.11336",
                "1.250614.11345",
                "1.250614.11914",
                "1.250614.11944",
                "1.250614.12045",
                "1.250614.12049",
                "1.250616.11044",
                "1.250616.11051",
                "1.250616.11057",
                "1.250616.11115",
                "1.250616.11119",
                "1.250616.11124",
                "1.250616.11131",
                "1.250616.11137",
                "1.250616.11141",
                "1.250616.11144",
                "1.250616.11147",
                "1.250616.11423",
                "1.250617.11905",
                "1.250618.10904",
                "1.250618.10912",
                "1.250618.10943",
                "1.250618.11316",
                "1.250618.11333",
                "1.250618.11338",
                "1.250618.11350",
                "1.250618.11401",
                "1.250618.11439",
                "1.250618.11456",
                "1.250618.11543",
                "1.250618.11613",
                "1.250618.11625",
                "1.250618.11629",
                "1.250618.12154",
                "1.250619.11037",
                "1.250619.11100",
                "1.250619.11945",
                "1.250620.10922",
                "1.250620.11139",
                "1.250620.11143",
                "1.250620.11152",
                "1.250620.11305",
                "1.250620.11404",
                "1.250620.11516",
                "1.250620.12122",
                "1.250620.12126",
                "1.250620.12129",
                "1.250620.12133",
                "1.250620.12154",
                "1.250620.12235",
                "1.250620.12251",
                "1.250620.12253",
                "1.250620.12259",
                "1.250620.12308",
                "1.250620.12314",
                "1.250620.12317",
                "1.250620.12320",
                "1.250620.12322",
                "1.250621.11400",
                "1.250621.11415",
                "1.250621.11416",
                "1.250621.11424",
                "1.250621.12021",
                "1.250622.11029",
                "1.250622.11717",
                "1.250622.11725",
                "1.250622.11729",
                "1.250623.10930",
                "1.250627.11509",
                "1.250627.11510",
                "1.250627.11511",
                "1.250627.11522",
                "1.250627.11527",
                "1.250627.11532",
                "1.250627.11933",
                "1.250627.11934",
                "1.250628.11517",
                "1.250628.11544",
                "1.250628.11604",
                "1.250628.11609",
                "1.250628.11802",
                "1.250629.10919",
                "1.250629.10926",
                "1.250629.10949",
                "1.250629.11025",
                "1.250630.10800",
                "1.250630.12016",
                "1.250702.11523",
                "1.250702.11629",
                "1.250713.11311",
                "1.250725.11617",
                "1.250729.11557",
                "1.250731.10832",
                "1.250806.12030",
                "1.250807.11323",
                "1.250808.12108",
                "1.250810.12023",
                "1.250810.12027",
                "1.250813.11548",
                "1.250820.12007",
                "1.250910.11816",
                "1.250910.11820",
                "1.250917.11521",
                "1.250917.11919",
                "1.250918.11117",
                "1.250918.11409",
                "1.250918.11950",
                "1.250924.11809",
                "1.250924.11813"
            ],
            "source": "reversing-labs",
            "modified_time": "2025-12-01T13:07:40Z",
            "sha256": "440bc99b5f625c19fc4be7f6584fc11efbee7adad98116d8230bc3b6c71ab29d"
        }
    ]
}

References

https://www.getsafety.com/blog-posts/javascript-rat-targets-banks

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / dhemrdhs92007

Package

Name: dhemrdhs92007; View open source insights on deps.dev
Purl: pkg:npm/dhemrdhs92007

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.250613.11336

1.250614.11345

1.250614.11914

1.250614.11944

1.250614.12045

1.250614.12049

1.250616.11044

1.250616.11051

1.250616.11057

1.250616.11115

1.250616.11119

1.250616.11124

1.250616.11131

1.250616.11137

1.250616.11141

1.250616.11144

1.250616.11147

1.250616.11423

1.250617.11905

1.250618.10904

1.250618.10912

1.250618.10943

1.250618.11316

1.250618.11333

1.250618.11338

1.250618.11350

1.250618.11401

1.250618.11439

1.250618.11456

1.250618.11543

1.250618.11613

1.250618.11625

1.250618.11629

1.250618.12154

1.250619.11037

1.250619.11100

1.250619.11945

1.250620.10922

1.250620.11139

1.250620.11143

1.250620.11152

1.250620.11305

1.250620.11404

1.250620.11516

1.250620.12122

1.250620.12126

1.250620.12129

1.250620.12133

1.250620.12154

1.250620.12235

1.250620.12251

1.250620.12253

1.250620.12259

1.250620.12308

1.250620.12314

1.250620.12317

1.250620.12320

1.250620.12322

1.250621.11400

1.250621.11415

1.250621.11416

1.250621.11424

1.250621.12021

1.250622.11029

1.250622.11717

1.250622.11725

1.250622.11729

1.250623.10930

1.250627.11509

1.250627.11510

1.250627.11511

1.250627.11522

1.250627.11527

1.250627.11532

1.250627.11933

1.250627.11934

1.250628.11517

1.250628.11544

1.250628.11604

1.250628.11609

1.250628.11802

1.250629.10919

1.250629.10926

1.250629.10949

1.250629.11025

1.250630.10800

1.250630.12016

1.250702.11523

1.250702.11629

1.250713.11311

1.250725.11617

1.250729.11557

1.250731.10832

1.250806.12030

1.250807.11323

1.250808.12108

1.250810.12023

1.250810.12027

1.250813.11548

1.250820.12007

1.250910.11816

1.250910.11820

1.250917.11521

1.250917.11919

1.250918.11117

1.250918.11409

1.250918.11950

1.250924.11809

1.250924.11813

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhemrdhs92007/MAL-2025-48635.json"