目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
npm active

dhemrdhs92007

MAL-2025-48635
2025-12-02 09:12:13
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in dhemrdhs92007 (npm)

AI 分析整理qwen3.6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
2
数据源
npmjs.org
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmdhemrdhs92007*
npmdhemrdhs920071.250613.11336
npmdhemrdhs920071.250614.11345
npmdhemrdhs920071.250614.11914
npmdhemrdhs920071.250614.11944
npmdhemrdhs920071.250614.12045
npmdhemrdhs920071.250614.12049
npmdhemrdhs920071.250616.11044
npmdhemrdhs920071.250616.11051
npmdhemrdhs920071.250616.11057
npmdhemrdhs920071.250616.11115
npmdhemrdhs920071.250616.11119
npmdhemrdhs920071.250616.11124
npmdhemrdhs920071.250616.11131
npmdhemrdhs920071.250616.11137
npmdhemrdhs920071.250616.11141
npmdhemrdhs920071.250616.11144
npmdhemrdhs920071.250616.11147
npmdhemrdhs920071.250616.11423
npmdhemrdhs920071.250617.11905
npmdhemrdhs920071.250618.10904
npmdhemrdhs920071.250618.10912
npmdhemrdhs920071.250618.10943
npmdhemrdhs920071.250618.11316
npmdhemrdhs920071.250618.11333
npmdhemrdhs920071.250618.11338
npmdhemrdhs920071.250618.11350
npmdhemrdhs920071.250618.11401
npmdhemrdhs920071.250618.11439
npmdhemrdhs920071.250618.11456
npmdhemrdhs920071.250618.11543
npmdhemrdhs920071.250618.11613
npmdhemrdhs920071.250618.11625
npmdhemrdhs920071.250618.11629
npmdhemrdhs920071.250618.12154
npmdhemrdhs920071.250619.11037
npmdhemrdhs920071.250619.11100
npmdhemrdhs920071.250619.11945
npmdhemrdhs920071.250620.10922
npmdhemrdhs920071.250620.11139
npmdhemrdhs920071.250620.11143
npmdhemrdhs920071.250620.11152
npmdhemrdhs920071.250620.11305
npmdhemrdhs920071.250620.11404
npmdhemrdhs920071.250620.11516
npmdhemrdhs920071.250620.12122
npmdhemrdhs920071.250620.12126
npmdhemrdhs920071.250620.12129
npmdhemrdhs920071.250620.12133
npmdhemrdhs920071.250620.12154
npmdhemrdhs920071.250620.12235
npmdhemrdhs920071.250620.12251
npmdhemrdhs920071.250620.12253
npmdhemrdhs920071.250620.12259
npmdhemrdhs920071.250620.12308
npmdhemrdhs920071.250620.12314
npmdhemrdhs920071.250620.12317
npmdhemrdhs920071.250620.12320
npmdhemrdhs920071.250620.12322
npmdhemrdhs920071.250621.11400
npmdhemrdhs920071.250621.11415
npmdhemrdhs920071.250621.11416
npmdhemrdhs920071.250621.11424
npmdhemrdhs920071.250621.12021
npmdhemrdhs920071.250622.11029
npmdhemrdhs920071.250622.11717
npmdhemrdhs920071.250622.11725
npmdhemrdhs920071.250622.11729
npmdhemrdhs920071.250623.10930
npmdhemrdhs920071.250627.11509
npmdhemrdhs920071.250627.11510
npmdhemrdhs920071.250627.11511
npmdhemrdhs920071.250627.11522
npmdhemrdhs920071.250627.11527
npmdhemrdhs920071.250627.11532
npmdhemrdhs920071.250627.11933
npmdhemrdhs920071.250627.11934
npmdhemrdhs920071.250628.11517
npmdhemrdhs920071.250628.11544
npmdhemrdhs920071.250628.11604
npmdhemrdhs920071.250628.11609
npmdhemrdhs920071.250628.11802
npmdhemrdhs920071.250629.10919
npmdhemrdhs920071.250629.10926
npmdhemrdhs920071.250629.10949
npmdhemrdhs920071.250629.11025
npmdhemrdhs920071.250630.10800
npmdhemrdhs920071.250630.12016
npmdhemrdhs920071.250702.11523
npmdhemrdhs920071.250702.11629
npmdhemrdhs920071.250713.11311
npmdhemrdhs920071.250725.11617
npmdhemrdhs920071.250729.11557
npmdhemrdhs920071.250731.10832
npmdhemrdhs920071.250806.12030
npmdhemrdhs920071.250807.11323
npmdhemrdhs920071.250808.12108
npmdhemrdhs920071.250810.12023
npmdhemrdhs920071.250810.12027
npmdhemrdhs920071.250813.11548
npmdhemrdhs920071.250820.12007
npmdhemrdhs920071.250910.11816
npmdhemrdhs920071.250910.11820
npmdhemrdhs920071.250917.11521
npmdhemrdhs920071.250917.11919
npmdhemrdhs920071.250918.11117
npmdhemrdhs920071.250918.11409
npmdhemrdhs920071.250918.11950
npmdhemrdhs920071.250924.11809
npmdhemrdhs920071.250924.11813
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2025-12-02T09:12:13Z","published":"2025-10-26T19:03:27Z","schema_version":"1.7.4","id":"MAL-2025-48635","summary":"Malicious code in dhemrdhs92007 (npm)","details":"The package dhemrdhs92007 was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"dhemrdhs92007"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.250613.11336","1.250614.11345","1.250614.11914","1.250614.11944","1.250614.12045","1.250614.12049","1.250616.11044","1.250616.11051","1.250616.11057","1.250616.11115","1.250616.11119","1.250616.11124","1.250616.11131","1.250616.11137","1.250616.11141","1.250616.11144","1.250616.11147","1.250616.11423","1.250617.11905","1.250618.10904","1.250618.10912","1.250618.10943","1.250618.11316","1.250618.11333","1.250618.11338","1.250618.11350","1.250618.11401","1.250618.11439","1.250618.11456","1.250618.11543","1.250618.11613","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11037","1.250619.11100","1.250619.11945","1.250620.10922","1.250620.11139","1.250620.11143","1.250620.11152","1.250620.11305","1.250620.11404","1.250620.11516","1.250620.12122","1.250620.12126","1.250620.12129","1.250620.12133","1.250620.12154","1.250620.12235","1.250620.12251","1.250620.12253","1.250620.12259","1.250620.12308","1.250620.12314","1.250620.12317","1.250620.12320","1.250620.12322","1.250621.11400","1.250621.11415","1.250621.11416","1.250621.11424","1.250621.12021","1.250622.11029","1.250622.11717","1.250622.11725","1.250622.11729","1.250623.10930","1.250627.11509","1.250627.11510","1.250627.11511","1.250627.11522","1.250627.11527","1.250627.11532","1.250627.11933","1.250627.11934","1.250628.11517","1.250628.11544","1.250628.11604","1.250628.11609","1.250628.11802","1.250629.10919","1.250629.10926","1.250629.10949","1.250629.11025","1.250630.10800","1.250630.12016","1.250702.11523","1.250702.11629","1.250713.11311","1.250725.11617","1.250729.11557","1.250731.10832","1.250806.12030","1.250807.11323","1.250808.12108","1.250810.12023","1.250810.12027","1.250813.11548","1.250820.12007","1.250910.11816","1.250910.11820","1.250917.11521","1.250917.11919","1.250918.11117","1.250918.11409","1.250918.11950","1.250924.11809","1.250924.11813"]}],"references":[{"type":"WEB","url":"https://www.getsafety.com/blog-posts/javascript-rat-targets-banks"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"440bc99b5f625c19fc4be7f6584fc11efbee7adad98116d8230bc3b6c71ab29d","import_time":"2025-12-02T09:09:44.590678559Z","id":"RLMA-2025-05733","modified_time":"2025-12-01T13:07:40Z","versions":["1.250613.11336","1.250614.11345","1.250614.11914","1.250614.11944","1.250614.12045","1.250614.12049","1.250616.11044","1.250616.11051","1.250616.11057","1.250616.11115","1.250616.11119","1.250616.11124","1.250616.11131","1.250616.11137","1.250616.11141","1.250616.11144","1.250616.11147","1.250616.11423","1.250617.11905","1.250618.10904","1.250618.10912","1.250618.10943","1.250618.11316","1.250618.11333","1.250618.11338","1.250618.11350","1.250618.11401","1.250618.11439","1.250618.11456","1.250618.11543","1.250618.11613","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11037","1.250619.11100","1.250619.11945","1.250620.10922","1.250620.11139","1.250620.11143","1.250620.11152","1.250620.11305","1.250620.11404","1.250620.11516","1.250620.12122","1.250620.12126","1.250620.12129","1.250620.12133","1.250620.12154","1.250620.12235","1.250620.12251","1.250620.12253","1.250620.12259","1.250620.12308","1.250620.12314","1.250620.12317","1.250620.12320","1.250620.12322","1.250621.11400","1.250621.11415","1.250621.11416","1.250621.11424","1.250621.12021","1.250622.11029","1.250622.11717","1.250622.11725","1.250622.11729","1.250623.10930","1.250627.11509","1.250627.11510","1.250627.11511","1.250627.11522","1.250627.11527","1.250627.11532","1.250627.11933","1.250627.11934","1.250628.11517","1.250628.11544","1.250628.11604","1.250628.11609","1.250628.11802","1.250629.10919","1.250629.10926","1.250629.10949","1.250629.11025","1.250630.10800","1.250630.12016","1.250702.11523","1.250702.11629","1.250713.11311","1.250725.11617","1.250729.11557","1.250731.10832","1.250806.12030","1.250807.11323","1.250808.12108","1.250810.12023","1.250810.12027","1.250813.11548","1.250820.12007","1.250910.11816","1.250910.11820","1.250917.11521","1.250917.11919","1.250918.11117","1.250918.11409","1.250918.11950","1.250924.11809","1.250924.11813"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0