{"id":"MAL-2025-48635","summary":"Malicious code in dhemrdhs92007 (npm)","details":"The package dhemrdhs92007 was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2025-12-02T10:09:21.873883Z","published":"2025-10-26T19:03:27Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","versions":["1.250613.11336","1.250614.11345","1.250614.11914","1.250614.11944","1.250614.12045","1.250614.12049","1.250616.11044","1.250616.11051","1.250616.11057","1.250616.11115","1.250616.11119","1.250616.11124","1.250616.11131","1.250616.11137","1.250616.11141","1.250616.11144","1.250616.11147","1.250616.11423","1.250617.11905","1.250618.10904","1.250618.10912","1.250618.10943","1.250618.11316","1.250618.11333","1.250618.11338","1.250618.11350","1.250618.11401","1.250618.11439","1.250618.11456","1.250618.11543","1.250618.11613","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11037","1.250619.11100","1.250619.11945","1.250620.10922","1.250620.11139","1.250620.11143","1.250620.11152","1.250620.11305","1.250620.11404","1.250620.11516","1.250620.12122","1.250620.12126","1.250620.12129","1.250620.12133","1.250620.12154","1.250620.12235","1.250620.12251","1.250620.12253","1.250620.12259","1.250620.12308","1.250620.12314","1.250620.12317","1.250620.12320","1.250620.12322","1.250621.11400","1.250621.11415","1.250621.11416","1.250621.11424","1.250621.12021","1.250622.11029","1.250622.11717","1.250622.11725","1.250622.11729","1.250623.10930","1.250627.11509","1.250627.11510","1.250627.11511","1.250627.11522","1.250627.11527","1.250627.11532","1.250627.11933","1.250627.11934","1.250628.11517","1.250628.11544","1.250628.11604","1.250628.11609","1.250628.11802","1.250629.10919","1.250629.10926","1.250629.10949","1.250629.11025","1.250630.10800","1.250630.12016","1.250702.11523","1.250702.11629","1.250713.11311","1.250725.11617","1.250729.11557","1.250731.10832","1.250806.12030","1.250807.11323","1.250808.12108","1.250810.12023","1.250810.12027","1.250813.11548","1.250820.12007","1.250910.11816","1.250910.11820","1.250917.11521","1.250917.11919","1.250918.11117","1.250918.11409","1.250918.11950","1.250924.11809","1.250924.11813"],"id":"RLMA-2025-05733","import_time":"2025-12-02T09:09:44.590678559Z","modified_time":"2025-12-01T13:07:40Z","sha256":"440bc99b5f625c19fc4be7f6584fc11efbee7adad98116d8230bc3b6c71ab29d"}]},"references":[{"type":"WEB","url":"https://www.getsafety.com/blog-posts/javascript-rat-targets-banks"}],"affected":[{"package":{"name":"dhemrdhs92007","ecosystem":"npm","purl":"pkg:npm/dhemrdhs92007"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.250613.11336","1.250614.11345","1.250614.11914","1.250614.11944","1.250614.12045","1.250614.12049","1.250616.11044","1.250616.11051","1.250616.11057","1.250616.11115","1.250616.11119","1.250616.11124","1.250616.11131","1.250616.11137","1.250616.11141","1.250616.11144","1.250616.11147","1.250616.11423","1.250617.11905","1.250618.10904","1.250618.10912","1.250618.10943","1.250618.11316","1.250618.11333","1.250618.11338","1.250618.11350","1.250618.11401","1.250618.11439","1.250618.11456","1.250618.11543","1.250618.11613","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11037","1.250619.11100","1.250619.11945","1.250620.10922","1.250620.11139","1.250620.11143","1.250620.11152","1.250620.11305","1.250620.11404","1.250620.11516","1.250620.12122","1.250620.12126","1.250620.12129","1.250620.12133","1.250620.12154","1.250620.12235","1.250620.12251","1.250620.12253","1.250620.12259","1.250620.12308","1.250620.12314","1.250620.12317","1.250620.12320","1.250620.12322","1.250621.11400","1.250621.11415","1.250621.11416","1.250621.11424","1.250621.12021","1.250622.11029","1.250622.11717","1.250622.11725","1.250622.11729","1.250623.10930","1.250627.11509","1.250627.11510","1.250627.11511","1.250627.11522","1.250627.11527","1.250627.11532","1.250627.11933","1.250627.11934","1.250628.11517","1.250628.11544","1.250628.11604","1.250628.11609","1.250628.11802","1.250629.10919","1.250629.10926","1.250629.10949","1.250629.11025","1.250630.10800","1.250630.12016","1.250702.11523","1.250702.11629","1.250713.11311","1.250725.11617","1.250729.11557","1.250731.10832","1.250806.12030","1.250807.11323","1.250808.12108","1.250810.12023","1.250810.12027","1.250813.11548","1.250820.12007","1.250910.11816","1.250910.11820","1.250917.11521","1.250917.11919","1.250918.11117","1.250918.11409","1.250918.11950","1.250924.11809","1.250924.11813"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dhemrdhs92007/MAL-2025-48635.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}