{"id":"MAL-2025-67","summary":"Malicious code in keeper-secrets-manager (npm)","details":"This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2025-05-22T14:07:47Z","published":"2025-01-08T01:43:42Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-00243","import_time":"2025-02-03T18:37:54.739182878Z","modified_time":"2025-02-03T16:55:19Z","sha256":"956e185bcbe02573264003d5f115bee670502d2e2942bfacd1ecb30788559297","source":"reversing-labs","versions":["1.1.0"]},{"source":"reversing-labs","versions":["7.7.7","7.7.8"],"id":"RLUA-2025-02833","import_time":"2025-05-22T14:07:13.79537526Z","modified_time":"2025-05-22T12:47:59Z","sha256":"b020a93471303aa1915f088f4bab41d1c870b5a38441884d283101c268a43f93"}]},"affected":[{"package":{"name":"keeper-secrets-manager","ecosystem":"npm","purl":"pkg:npm/keeper-secrets-manager"},"versions":["1.1.0","7.7.7","7.7.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/keeper-secrets-manager/MAL-2025-67.json"}}],"schema_version":"1.7.3","credits":[{"name":"GitHax - Software Supply Chain Threat Intelligence","contact":["https://githax.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}