MAL-2025-48949

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/test771/MAL-2025-48949.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-48949
Published
2025-10-28T10:50:43Z
Modified
2025-10-31T03:25:41Z
Summary
Malicious code in test771 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (39742384f3c2564e0528b3d94dc6b6cd66170e96d6a2818289c862bef030f39b)

The package test771 was found to contain malicious code.

Source: ossf-package-analysis (fbdb37fb2238599fb921d6fd14a8d65fdc19f6196377b91e304da671021e4113)

The OpenSSF Package Analysis project identified 'test771' @ 1.0.0 (npm) as malicious.

It is considered malicious because:

  • The package executes one or more commands associated with malicious behavior.
Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2025-10-28T22:37:24.434577592Z",
            "sha256": "fbdb37fb2238599fb921d6fd14a8d65fdc19f6196377b91e304da671021e4113",
            "source": "ossf-package-analysis",
            "modified_time": "2025-10-28T10:50:43Z",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "ranges": [
                {
                    "type": "SEMVER",
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ]
                }
            ],
            "import_time": "2025-10-31T03:25:16.08577132Z",
            "sha256": "39742384f3c2564e0528b3d94dc6b6cd66170e96d6a2818289c862bef030f39b",
            "source": "amazon-inspector",
            "modified_time": "2025-10-31T03:06:14Z"
        }
    ]
}
References
Credits

Affected packages

npm / test771

Package

Name
test771
View open source insights on deps.dev
Purl
pkg:npm/test771

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/test771/MAL-2025-48949.json"