flagstealer

{"modified":"2025-12-24T00:53:17Z","published":"2025-12-23T08:14:04Z","schema_version":"1.7.4","id":"MAL-2025-192798","summary":"Malicious code in flagstealer (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a1f3527e4c2a632b043831e4745488a4dd8eb7df018fcfec43e89deddca6193c)\nThe package flagstealer was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"flagstealer","purl":"pkg:npm/flagstealer"},"versions":["0.30.2","0.30.4"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"8039d830fb8ae21bb15af693b241a4773440972a672107a37fba4344723a3991","import_time":"2025-12-23T22:38:30.717675123Z","id":"RLMA-2025-06354","modified_time":"2025-12-23T08:14:04Z","versions":["0.30.2","0.30.4"]},{"source":"amazon-inspector","sha256":"a1f3527e4c2a632b043831e4745488a4dd8eb7df018fcfec43e89deddca6193c","import_time":"2025-12-24T00:51:36.620814801Z","modified_time":"2025-12-24T00:41:11Z","versions":["0.30.2","0.30.4"]}]}}