{"id":"MAL-2025-22942","summary":"Malicious code in icons-generator (npm)","details":"The package icons-generator was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2025-09-26T11:06:45Z","published":"2025-08-14T18:52:04Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-08-29T06:42:24.756403252Z","modified_time":"2025-08-28T07:30:43Z","sha256":"5bda083dee1aade8f97990129073f35d6dc3c1c08ab36ed54ddd13de5b87b2e5","source":"reversing-labs","versions":["1.3.5"],"id":"RLMA-2025-04560"},{"id":"RLUA-2025-05038","import_time":"2025-09-26T11:06:12.22644857Z","modified_time":"2025-09-26T09:33:32Z","sha256":"4ead6fd9f1357864e8037a5a2cfa1806c43c8c4a6866472380836caec739d449","source":"reversing-labs","versions":["0.0.2","0.0.3","1.1.1","0.0.1"]}]},"affected":[{"package":{"name":"icons-generator","ecosystem":"npm","purl":"pkg:npm/icons-generator"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.3.5","0.0.2","0.0.3","1.1.1","0.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/icons-generator/MAL-2025-22942.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}