MAL-2025-5994

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/acsascasccsaascascacs/MAL-2025-5994.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-5994
Published
2025-07-17T15:55:38Z
Modified
2025-07-17T17:07:41Z
Summary
Malicious code in acsascasccsaascascacs (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (7a4d29e3ba25b084215e80ac7601a998e66cf11ad88607db37e23fa50817b135)

The OpenSSF Package Analysis project identified 'acsascasccsaascascacs' @ 1.0.2 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2025-07-17T16:07:14.638766824Z",
            "source": "ossf-package-analysis",
            "sha256": "7a4d29e3ba25b084215e80ac7601a998e66cf11ad88607db37e23fa50817b135",
            "versions": [
                "1.0.2"
            ],
            "modified_time": "2025-07-17T16:00:45Z"
        },
        {
            "import_time": "2025-07-17T16:07:14.541000733Z",
            "source": "ossf-package-analysis",
            "sha256": "d394485fd5a1c1b14a31ce2e0d09d9b99a6ac0e2c55029c65416add56d89f19d",
            "versions": [
                "1.0.0"
            ],
            "modified_time": "2025-07-17T15:55:38Z"
        },
        {
            "import_time": "2025-07-17T16:41:57.281078599Z",
            "source": "ossf-package-analysis",
            "sha256": "55a39e1baf2e7f86a23e00803cac520b607e893649affce3615f280959fd5a79",
            "versions": [
                "1.0.4"
            ],
            "modified_time": "2025-07-17T16:15:52Z"
        },
        {
            "import_time": "2025-07-17T17:07:20.032428026Z",
            "source": "ossf-package-analysis",
            "sha256": "36df810b31c750ac693b5d174335700c0fdb92d607ee288e4fb0930563c2272a",
            "versions": [
                "1.0.3"
            ],
            "modified_time": "2025-07-17T16:46:02Z"
        }
    ]
}
References
Credits

Affected packages

npm / acsascasccsaascascacs

Package

Name
acsascasccsaascascacs
View open source insights on deps.dev
Purl
pkg:npm/acsascasccsaascascacs

Affected ranges

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/acsascasccsaascascacs/MAL-2025-5994.json"