MAL-2025-48719

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ldhpgemrdhs60152/MAL-2025-48719.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-48719

Published

2025-10-26T19:03:27Z

Modified

2025-12-02T10:10:25Z

Summary

Malicious code in ldhpgemrdhs60152 (npm)

Details

The package ldhpgemrdhs60152 was found to contain malicious code.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-05848",
            "import_time": "2025-12-02T09:09:50.745468281Z",
            "modified_time": "2025-12-01T13:15:43Z",
            "sha256": "71cdba467fa78300a0acfab6610e80b534dab256552b051bb43b0edc1b810888",
            "source": "reversing-labs",
            "versions": [
                "1.250915.11002",
                "1.250915.11348",
                "1.250915.11350",
                "1.250915.11513",
                "1.250915.11514",
                "1.250915.11830",
                "1.250916.10756",
                "1.250916.11429",
                "1.250917.10800",
                "1.250917.11418",
                "1.250918.10826",
                "1.250918.11326",
                "1.250918.11343",
                "1.250918.11555",
                "1.250918.11814",
                "1.250923.10851",
                "1.250923.11033",
                "1.250926.11414",
                "1.251021.10755",
                "1.251021.11516",
                "1.251021.11520",
                "1.251022.11336"
            ]
        }
    ]
}

References

https://www.getsafety.com/blog-posts/javascript-rat-targets-banks

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / ldhpgemrdhs60152

Package

Name: ldhpgemrdhs60152; View open source insights on deps.dev
Purl: pkg:npm/ldhpgemrdhs60152

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.250915.11002

1.250915.11348

1.250915.11350

1.250915.11513

1.250915.11514

1.250915.11830

1.250916.10756

1.250916.11429

1.250917.10800

1.250917.11418

1.250918.10826

1.250918.11326

1.250918.11343

1.250918.11555

1.250918.11814

1.250923.10851

1.250923.11033

1.250926.11414

1.251021.10755

1.251021.11516

1.251021.11520

1.251022.11336

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ldhpgemrdhs60152/MAL-2025-48719.json"