MAL-2025-48660

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhpgemrdhs92006/MAL-2025-48660.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-48660

Published

2025-10-26T19:03:27Z

Modified

2025-12-02T10:04:18.915614Z

Summary

Malicious code in dhpgemrdhs92006 (npm)

Details

The package dhpgemrdhs92006 was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-02T09:09:46.285477237Z",
            "id": "RLMA-2025-05754",
            "versions": [
                "1.250722.11131",
                "1.250722.11150",
                "1.250723.11353",
                "1.250723.11430",
                "1.250723.11435",
                "1.250723.11457",
                "1.250724.11110",
                "1.250724.11137",
                "1.250724.11315",
                "1.250724.11321",
                "1.250724.11324",
                "1.250724.11327",
                "1.250724.11351",
                "1.250724.11423",
                "1.250806.10834",
                "1.250821.11343",
                "1.250910.11827",
                "1.250917.11521",
                "1.250924.11155"
            ],
            "source": "reversing-labs",
            "modified_time": "2025-12-01T13:08:11Z",
            "sha256": "132e57688e9a72d553fc671aad92e4e2dfb846fd8453e97fc3675a5fdf2a7e85"
        }
    ]
}

References

https://www.getsafety.com/blog-posts/javascript-rat-targets-banks

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / dhpgemrdhs92006

Package

Name: dhpgemrdhs92006; View open source insights on deps.dev
Purl: pkg:npm/dhpgemrdhs92006

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.250722.11131

1.250722.11150

1.250723.11353

1.250723.11430

1.250723.11435

1.250723.11457

1.250724.11110

1.250724.11137

1.250724.11315

1.250724.11321

1.250724.11324

1.250724.11327

1.250724.11351

1.250724.11423

1.250806.10834

1.250821.11343

1.250910.11827

1.250917.11521

1.250924.11155

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhpgemrdhs92006/MAL-2025-48660.json"