MAL-2025-49332

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/capes-template-angular/MAL-2025-49332.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-49332
Published
2025-11-03T18:59:00Z
Modified
2025-11-05T15:37:24Z
Summary
Malicious code in capes-template-angular (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2)

The package capes-template-angular was found to contain malicious code.

Source: ossf-package-analysis (a7c701b53ee921672c1ea257d062b4bddb91b15d7e1960bb7a151f034548656c)

The OpenSSF Package Analysis project identified 'capes-template-angular' @ 10.0.7 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2025-11-03T19:05:50.757416625Z",
            "sha256": "69552ec46096bcb8407bb78e3a0e23b6b95e46ac69c7dd1c41aa79edf250cbe2",
            "source": "amazon-inspector",
            "modified_time": "2025-11-03T18:59:00Z",
            "versions": [
                "1.0.1"
            ]
        },
        {
            "import_time": "2025-11-05T15:08:00.211283881Z",
            "sha256": "331333a531cf3436bb8f4d57eec53257e5b876e1e1f755a9cedf6a8b84046b46",
            "source": "ossf-package-analysis",
            "modified_time": "2025-11-05T14:45:51Z",
            "versions": [
                "1.0.7"
            ]
        },
        {
            "import_time": "2025-11-05T15:08:00.427419075Z",
            "sha256": "9693a600ee47dccb69d48e426e90e4264f36687cb9e19cea2ae9c4ce67a00b4b",
            "source": "ossf-package-analysis",
            "modified_time": "2025-11-05T14:51:04Z",
            "versions": [
                "1.0.5"
            ]
        },
        {
            "import_time": "2025-11-05T15:36:51.353650376Z",
            "sha256": "a7c701b53ee921672c1ea257d062b4bddb91b15d7e1960bb7a151f034548656c",
            "source": "ossf-package-analysis",
            "modified_time": "2025-11-05T15:13:31Z",
            "versions": [
                "10.0.7"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / capes-template-angular

Package

Name
capes-template-angular
View open source insights on deps.dev
Purl
pkg:npm/capes-template-angular

Affected ranges

Affected versions

1.*
1.0.1
1.0.5
1.0.7
10.*
10.0.7

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/capes-template-angular/MAL-2025-49332.json"