{"id":"MAL-2025-6923","summary":"Malicious code in dpais-chat-template-pwa (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc)\nThe OpenSSF Package Analysis project identified 'dpais-chat-template-pwa' @ 11.2.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-08-29T06:43:16Z","published":"2025-08-12T22:55:42Z","database_specific":{"malicious-packages-origins":[{"sha256":"4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc","source":"ossf-package-analysis","versions":["11.2.1"],"import_time":"2025-08-18T06:09:44.475025911Z","modified_time":"2025-08-12T23:36:33Z"},{"import_time":"2025-08-18T06:09:44.291300952Z","modified_time":"2025-08-12T22:55:42Z","sha256":"51ecef29c8473edf324417e5e6c95feb522835020b108cf6bcf0739e4c9fd5bf","source":"ossf-package-analysis","versions":["10.0.1"]},{"modified_time":"2025-08-13T17:00:51Z","sha256":"f6d6c920ce33ac15185b4612ec2a54662d74e1da398525c6510bd2efc38c578f","source":"ossf-package-analysis","versions":["12.3.0"],"import_time":"2025-08-18T06:09:45.203882495Z"},{"versions":["3.0.2","10.0.1","11.2.1","12.3.0"],"id":"RLMA-2025-04504","import_time":"2025-08-29T06:42:19.35188166Z","modified_time":"2025-08-28T07:26:43Z","sha256":"05871a4e6e18f14ed9d919382616541526afc50ea2abce48236cf03ea89ee73b","source":"reversing-labs"}]},"affected":[{"package":{"name":"dpais-chat-template-pwa","ecosystem":"npm","purl":"pkg:npm/dpais-chat-template-pwa"},"ranges":[{"type":"SEMVER","events":[{"introduced":"10.0.1"}]}],"versions":["11.2.1","10.0.1","12.3.0","3.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dpais-chat-template-pwa/MAL-2025-6923.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}