MAL-2026-7332

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/options-msg/MAL-2026-7332.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-7332

Aliases

GHSA-vrvm-pphq-472w

Published

2026-07-07T13:02:39Z

Modified

2026-09-01T11:31:39Z

Summary

Malicious code in options-msg (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2026-05196",
            "import_time": "2026-07-09T09:16:40.814775044Z",
            "modified_time": "2026-07-07T13:02:39Z",
            "sha256": "cccc5db0ed5b00d861cc6bd2856a3f0c06f1c92b9b4c482f01ff28da4ee7f375",
            "source": "reversing-labs",
            "versions": [
                "1.0.0",
                "1.0.1",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5"
            ]
        },
        {
            "id": "RLUA-2026-06357",
            "import_time": "2026-09-01T11:18:14.164677345Z",
            "modified_time": "2026-08-24T17:02:44Z",
            "sha256": "8c7204a690a6c29ca7250ca4114898d49094b6fd429443ca4edf54cf697cd6a3",
            "source": "reversing-labs"
        }
    ]
}

References

https://github.com/advisories/GHSA-vrvm-pphq-472w

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / options-msg

Package

Name: options-msg; View open source insights on deps.dev
Purl: pkg:npm/options-msg

Affected ranges

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/options-msg/MAL-2026-7332.json"