MAL-2025-48643

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhemrdhs95005/MAL-2025-48643.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-48643

Published

2025-10-26T19:03:27Z

Modified

2025-12-02T10:09:34Z

Summary

Malicious code in dhemrdhs95005 (npm)

Details

The package dhemrdhs95005 was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2025-05740",
            "import_time":  "2025-12-02T09:09:45.217507082Z",
            "modified_time":  "2025-12-01T13:07:48Z",
            "sha256":  "b796640b2f782b8ec1b2aef4153f5228652743acbd577cc88074e52ec8f0506a",
            "source":  "reversing-labs",
            "versions":  [
                "1.250729.11824",
                "1.250730.12055",
                "1.250730.12126",
                "1.250730.12133",
                "1.250731.10742",
                "1.250804.11150",
                "1.250804.11707",
                "1.250812.10806",
                "1.250815.10755",
                "1.250815.10802",
                "1.250815.10816",
                "1.250815.10827",
                "1.250815.10833",
                "1.250816.11702",
                "1.250820.12017",
                "1.250910.11821",
                "1.250910.11822",
                "1.250917.11521",
                "1.250917.11852",
                "1.250923.11849",
                "1.251009.11948"
            ]
        }
    ]
}

References

https://www.getsafety.com/blog-posts/javascript-rat-targets-banks

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / dhemrdhs95005

Package

Name: dhemrdhs95005; View open source insights on deps.dev
Purl: pkg:npm/dhemrdhs95005

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.250729.11824

1.250730.12055

1.250730.12126

1.250730.12133

1.250731.10742

1.250804.11150

1.250804.11707

1.250812.10806

1.250815.10755

1.250815.10802

1.250815.10816

1.250815.10827

1.250815.10833

1.250816.11702

1.250820.12017

1.250910.11821

1.250910.11822

1.250917.11521

1.250917.11852

1.250923.11849

1.251009.11948

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhemrdhs95005/MAL-2025-48643.json"