MAL-2025-6955

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/rush-plugins/MAL-2025-6955.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-6955
Published
2025-08-13T03:28:10Z
Modified
2025-08-29T06:43:17Z
Summary
Malicious code in rush-plugins (npm)
Details

The package communicates with a domain associated with malicious activity.

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "999.0.0"
            ],
            "sha256": "cf6075708d00bc0d4d8e5b6b604a74257b2f1ec6a08d0e2b0d6a04a6d3195ca3",
            "modified_time": "2025-08-28T07:39:22Z",
            "source": "reversing-labs",
            "id": "RLMA-2025-04671",
            "import_time": "2025-08-29T06:42:35.15342531Z"
        }
    ]
}
References
Credits

Affected packages

npm / rush-plugins

Package

Name
rush-plugins
View open source insights on deps.dev
Purl
pkg:npm/rush-plugins

Affected ranges

Type
SEMVER
Events
Introduced
999.0.0

Affected versions

999.*
999.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/rush-plugins/MAL-2025-6955.json"