{"id":"MAL-2025-191568","summary":"Malicious code in client-6wr4qk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f5905ba13fb3633a7f270133b2b1f4b19b0ed3ee549040f6b243ad74aa1b10c4)\nThe package client-6wr4qk was found to contain malicious code.\n","modified":"2025-12-02T21:58:12.711510Z","published":"2025-12-01T13:05:27Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","versions":["1.0.0"],"id":"RLMA-2025-05704","import_time":"2025-12-02T09:09:42.867608598Z","modified_time":"2025-12-01T13:05:27Z","sha256":"4b9d3e533bc8d24533d606b0e5b015097d53487461959f3a5f4d83e5939aaae3"},{"sha256":"f5905ba13fb3633a7f270133b2b1f4b19b0ed3ee549040f6b243ad74aa1b10c4","source":"amazon-inspector","versions":["1.0.0"],"import_time":"2025-12-02T21:35:53.489422127Z","modified_time":"2025-12-02T21:11:00Z"}]},"affected":[{"package":{"name":"client-6wr4qk","ecosystem":"npm","purl":"pkg:npm/client-6wr4qk"},"versions":["1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/client-6wr4qk/MAL-2025-191568.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}