目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
npm active

dhemrdhs92004

MAL-2025-48633
2025-12-02 09:12:13
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in dhemrdhs92004 (npm)

AI 分析整理qwen3.6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
2
数据源
npmjs.org
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmdhemrdhs92004*
npmdhemrdhs920041.250607.11915
npmdhemrdhs920041.250607.11922
npmdhemrdhs920041.250607.11930
npmdhemrdhs920041.250607.11935
npmdhemrdhs920041.250607.11937
npmdhemrdhs920041.250607.11941
npmdhemrdhs920041.250607.11950
npmdhemrdhs920041.250607.11953
npmdhemrdhs920041.250607.12009
npmdhemrdhs920041.250616.11048
npmdhemrdhs920041.250616.11051
npmdhemrdhs920041.250616.11118
npmdhemrdhs920041.250616.11129
npmdhemrdhs920041.250616.11137
npmdhemrdhs920041.250616.11141
npmdhemrdhs920041.250616.11144
npmdhemrdhs920041.250616.11147
npmdhemrdhs920041.250617.11924
npmdhemrdhs920041.250618.10946
npmdhemrdhs920041.250618.11401
npmdhemrdhs920041.250618.11439
npmdhemrdhs920041.250618.11511
npmdhemrdhs920041.250618.11625
npmdhemrdhs920041.250618.11629
npmdhemrdhs920041.250618.12154
npmdhemrdhs920041.250619.11041
npmdhemrdhs920041.250620.10922
npmdhemrdhs920041.250630.12101
npmdhemrdhs920041.250722.11818
npmdhemrdhs920041.250809.11036
npmdhemrdhs920041.250816.10037
npmdhemrdhs920041.250816.10749
npmdhemrdhs920041.250817.11820
npmdhemrdhs920041.250820.12226
npmdhemrdhs920041.250907.11732
npmdhemrdhs920041.250910.11832
npmdhemrdhs920041.250916.11857
npmdhemrdhs920041.250917.11521
npmdhemrdhs920041.250917.11919
npmdhemrdhs920041.250918.11852
npmdhemrdhs920041.250924.11809
npmdhemrdhs920041.251002.11817
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2025-12-02T09:12:13Z","published":"2025-10-26T19:03:27Z","schema_version":"1.7.4","id":"MAL-2025-48633","summary":"Malicious code in dhemrdhs92004 (npm)","details":"The package dhemrdhs92004 was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"dhemrdhs92004"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.250607.11915","1.250607.11922","1.250607.11930","1.250607.11935","1.250607.11937","1.250607.11941","1.250607.11950","1.250607.11953","1.250607.12009","1.250616.11048","1.250616.11051","1.250616.11118","1.250616.11129","1.250616.11137","1.250616.11141","1.250616.11144","1.250616.11147","1.250617.11924","1.250618.10946","1.250618.11401","1.250618.11439","1.250618.11511","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11041","1.250620.10922","1.250630.12101","1.250722.11818","1.250809.11036","1.250816.10037","1.250816.10749","1.250817.11820","1.250820.12226","1.250907.11732","1.250910.11832","1.250916.11857","1.250917.11521","1.250917.11919","1.250918.11852","1.250924.11809","1.251002.11817"]}],"references":[{"type":"WEB","url":"https://www.getsafety.com/blog-posts/javascript-rat-targets-banks"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"3ffb9d5d020631d92f928681b9918bb008b8250d7ecfc5124d979ca4cd5dad4a","import_time":"2025-12-02T09:09:44.427952097Z","id":"RLMA-2025-05731","modified_time":"2025-12-01T13:07:37Z","versions":["1.250607.11915","1.250607.11922","1.250607.11930","1.250607.11935","1.250607.11937","1.250607.11941","1.250607.11950","1.250607.11953","1.250607.12009","1.250616.11048","1.250616.11051","1.250616.11118","1.250616.11129","1.250616.11137","1.250616.11141","1.250616.11144","1.250616.11147","1.250617.11924","1.250618.10946","1.250618.11401","1.250618.11439","1.250618.11511","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11041","1.250620.10922","1.250630.12101","1.250722.11818","1.250809.11036","1.250816.10037","1.250816.10749","1.250817.11820","1.250820.12226","1.250907.11732","1.250910.11832","1.250916.11857","1.250917.11521","1.250917.11919","1.250918.11852","1.250924.11809","1.251002.11817"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0