MAL-2025-48669

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhpgemrdhs95005/MAL-2025-48669.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-48669

Published

2025-10-26T19:03:27Z

Modified

2025-12-02T10:09:39.254576Z

Summary

Malicious code in dhpgemrdhs95005 (npm)

Details

The package dhpgemrdhs95005 was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-02T09:09:46.961391584Z",
            "id": "RLMA-2025-05762",
            "versions": [
                "1.250729.11824",
                "1.250730.12055",
                "1.250730.12126",
                "1.250730.12133",
                "1.250731.10742",
                "1.250804.11150",
                "1.250804.11707",
                "1.250812.10805",
                "1.250815.10755",
                "1.250815.10801",
                "1.250815.10816",
                "1.250815.10826",
                "1.250816.11702",
                "1.250820.12017",
                "1.250821.11044",
                "1.250910.11821",
                "1.250917.11521",
                "1.250917.11852",
                "1.250918.11045",
                "1.250923.11849",
                "1.251009.11947"
            ],
            "source": "reversing-labs",
            "modified_time": "2025-12-01T13:08:23Z",
            "sha256": "25032f9104498e1402df9fcf63cb13eed35f77804c529f87417fea348ac7d3c9"
        }
    ]
}

References

https://www.getsafety.com/blog-posts/javascript-rat-targets-banks

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / dhpgemrdhs95005

Package

Name: dhpgemrdhs95005; View open source insights on deps.dev
Purl: pkg:npm/dhpgemrdhs95005

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.250729.11824

1.250730.12055

1.250730.12126

1.250730.12133

1.250731.10742

1.250804.11150

1.250804.11707

1.250812.10805

1.250815.10755

1.250815.10801

1.250815.10816

1.250815.10826

1.250816.11702

1.250820.12017

1.250821.11044

1.250910.11821

1.250917.11521

1.250917.11852

1.250918.11045

1.250923.11849

1.251009.11947

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhpgemrdhs95005/MAL-2025-48669.json"