MAL-2025-192733Malicious code in ddxq_cms_tools (npm)
| Ecosystem | Package | Version |
|---|---|---|
| npm | ddxq_cms_tools | 999.0.0 |
{"modified":"2025-12-24T00:53:16Z","published":"2025-12-23T08:04:21Z","schema_version":"1.7.4","id":"MAL-2025-192733","summary":"Malicious code in ddxq_cms_tools (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (1c79b5bf164abe664b45e8c5ffcc1a0b7b68214b8b37182338b4c34ca4ae4b3a)\nThe package ddxq_cms_tools was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"ddxq_cms_tools","purl":"pkg:npm/ddxq_cms_tools"},"versions":["999.0.0"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"5c6eb1a30aa7ad9099749819f42bb792d29c809ea58ff0d32514e1a3a4ce19fa","import_time":"2025-12-23T16:42:56.603320221Z","id":"RLMA-2025-06111","modified_time":"2025-12-23T08:04:21Z","versions":["999.0.0"]},{"source":"amazon-inspector","sha256":"1c79b5bf164abe664b45e8c5ffcc1a0b7b68214b8b37182338b4c34ca4ae4b3a","import_time":"2025-12-24T00:51:40.925263179Z","modified_time":"2025-12-24T00:41:11Z","versions":["999.0.0"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0