MAL-2025-48664

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhpgemrdhs92010/MAL-2025-48664.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-48664

Published

2025-10-26T19:03:27Z

Modified

2025-12-02T10:10:43.683439Z

Summary

Malicious code in dhpgemrdhs92010 (npm)

Details

The package dhpgemrdhs92010 was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-02T09:09:46.519631165Z",
            "id": "RLMA-2025-05757",
            "versions": [
                "1.250726.11842",
                "1.250809.11454",
                "1.250809.11500",
                "1.250809.11634",
                "1.250809.11644",
                "1.250809.11648",
                "1.250809.11649",
                "1.250809.11749",
                "1.250809.11750",
                "1.250810.11129",
                "1.250810.12016",
                "1.250810.12027",
                "1.250813.11347",
                "1.250815.12017",
                "1.250817.11013",
                "1.250817.11923",
                "1.250821.10855",
                "1.250821.11342",
                "1.250910.11843",
                "1.250917.11518",
                "1.250924.11150"
            ],
            "source": "reversing-labs",
            "modified_time": "2025-12-01T13:08:14Z",
            "sha256": "3c7555cedfb2e78c1157e5a564e3657d3fe3aad2acaced756e0336fca838009c"
        }
    ]
}

References

https://www.getsafety.com/blog-posts/javascript-rat-targets-banks

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / dhpgemrdhs92010

Package

Name: dhpgemrdhs92010; View open source insights on deps.dev
Purl: pkg:npm/dhpgemrdhs92010

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.250726.11842

1.250809.11454

1.250809.11500

1.250809.11634

1.250809.11644

1.250809.11648

1.250809.11649

1.250809.11749

1.250809.11750

1.250810.11129

1.250810.12016

1.250810.12027

1.250813.11347

1.250815.12017

1.250817.11013

1.250817.11923

1.250821.10855

1.250821.11342

1.250910.11843

1.250917.11518

1.250924.11150

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhpgemrdhs92010/MAL-2025-48664.json"