MAL-2025-49340

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/loaders-fbo.gov/MAL-2025-49340.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-49340
Published
2025-11-03T18:59:00Z
Modified
2025-12-24T10:28:35.333184Z
Summary
Malicious code in loaders-fbo.gov (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (94f7b9f592e7c3247848d84ace7b0946ea44a6d1b0b12a91563d2ccf8427e19e)

The package loaders-fbo.gov was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "94f7b9f592e7c3247848d84ace7b0946ea44a6d1b0b12a91563d2ccf8427e19e",
            "modified_time": "2025-11-03T18:59:00Z",
            "versions": [
                "5.0.8",
                "5.0.9"
            ],
            "source": "amazon-inspector",
            "import_time": "2025-11-03T19:05:52.442882518Z"
        },
        {
            "sha256": "b2c88f8190562e9a59b29157b546326e087007fd0fc8553b6d4cf7fc7c90e10e",
            "modified_time": "2025-12-01T13:16:29Z",
            "id": "RLMA-2025-05864",
            "source": "reversing-labs",
            "versions": [
                "5.0.9"
            ],
            "import_time": "2025-12-02T09:09:52.285521999Z"
        },
        {
            "sha256": "d1a6695cce975cd3ded84789caf95a2357ed866286566a6478984384dbde2ceb",
            "modified_time": "2025-12-23T08:19:21Z",
            "id": "RLUA-2025-06398",
            "source": "reversing-labs",
            "versions": [
                "5.0.8"
            ],
            "import_time": "2025-12-24T10:07:35.012549891Z"
        }
    ]
}
References
Credits

Affected packages

npm / loaders-fbo.gov

Package

Name
loaders-fbo.gov
View open source insights on deps.dev
Purl
pkg:npm/loaders-fbo.gov

Affected ranges

Affected versions

5.*
5.0.8
5.0.9

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/loaders-fbo.gov/MAL-2025-49340.json"