{"id":"MAL-2025-41554","summary":"Malicious code in emittery-up (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-EMITTERYUP-13561254"],"modified":"2025-12-02T10:14:45.829771Z","published":"2025-08-28T07:27:13Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-04509","import_time":"2025-08-29T06:42:20.045803219Z","modified_time":"2025-08-28T07:27:13Z","sha256":"9c6b32fb8474a1f4f2aa3c294e5dbe29154b699711a109e51f7c933df21dfacf","source":"reversing-labs","versions":["0.7.2","0.8.2","1.8.2"]},{"id":"RLUA-2025-05775","import_time":"2025-12-02T09:10:03.728025298Z","modified_time":"2025-12-01T13:09:30Z","sha256":"1dd5b8c44beb200e98dc92abc8a82ad475b69b8e439225203e5f3e5e76c452d6","source":"reversing-labs"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-EMITTERYUP-13561254"},{"type":"ARTICLE","url":"https://socket.dev/blog/north-korea-contagious-interview-campaign-338-malicious-npm-packages"}],"affected":[{"package":{"name":"emittery-up","ecosystem":"npm","purl":"pkg:npm/emittery-up"},"versions":["0.7.2","0.8.2","1.8.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/emittery-up/MAL-2025-41554.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}