目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
npm active

dhpgemrdhs92004

MAL-2025-48659
2025-12-02 09:12:13
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in dhpgemrdhs92004 (npm)

AI 分析整理qwen3.6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
2
数据源
npmjs.org
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmdhpgemrdhs92004*
npmdhpgemrdhs920041.250609.10947
npmdhpgemrdhs920041.250609.11004
npmdhpgemrdhs920041.250609.11009
npmdhpgemrdhs920041.250609.11032
npmdhpgemrdhs920041.250609.11057
npmdhpgemrdhs920041.250609.11312
npmdhpgemrdhs920041.250609.11537
npmdhpgemrdhs920041.250609.12002
npmdhpgemrdhs920041.250610.11146
npmdhpgemrdhs920041.250610.11611
npmdhpgemrdhs920041.250611.11442
npmdhpgemrdhs920041.250611.11609
npmdhpgemrdhs920041.250617.11924
npmdhpgemrdhs920041.250618.10946
npmdhpgemrdhs920041.250618.11401
npmdhpgemrdhs920041.250618.11438
npmdhpgemrdhs920041.250618.11511
npmdhpgemrdhs920041.250618.11625
npmdhpgemrdhs920041.250618.11629
npmdhpgemrdhs920041.250618.12153
npmdhpgemrdhs920041.250619.11041
npmdhpgemrdhs920041.250620.10922
npmdhpgemrdhs920041.250630.12103
npmdhpgemrdhs920041.250722.11818
npmdhpgemrdhs920041.250809.11036
npmdhpgemrdhs920041.250816.10037
npmdhpgemrdhs920041.250816.10749
npmdhpgemrdhs920041.250817.11821
npmdhpgemrdhs920041.250817.11832
npmdhpgemrdhs920041.250820.12226
npmdhpgemrdhs920041.250907.11732
npmdhpgemrdhs920041.250910.11833
npmdhpgemrdhs920041.250916.11857
npmdhpgemrdhs920041.250917.11521
npmdhpgemrdhs920041.250918.11853
npmdhpgemrdhs920041.250924.11809
npmdhpgemrdhs920041.251002.11818
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2025-12-02T09:12:13Z","published":"2025-10-26T19:03:27Z","schema_version":"1.7.4","id":"MAL-2025-48659","summary":"Malicious code in dhpgemrdhs92004 (npm)","details":"The package dhpgemrdhs92004 was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"dhpgemrdhs92004"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.250609.10947","1.250609.11004","1.250609.11009","1.250609.11032","1.250609.11057","1.250609.11312","1.250609.11537","1.250609.12002","1.250610.11146","1.250610.11611","1.250611.11442","1.250611.11609","1.250617.11924","1.250618.10946","1.250618.11401","1.250618.11438","1.250618.11511","1.250618.11625","1.250618.11629","1.250618.12153","1.250619.11041","1.250620.10922","1.250630.12103","1.250722.11818","1.250809.11036","1.250816.10037","1.250816.10749","1.250817.11821","1.250817.11832","1.250820.12226","1.250907.11732","1.250910.11833","1.250916.11857","1.250917.11521","1.250918.11853","1.250924.11809","1.251002.11818"]}],"references":[{"type":"WEB","url":"https://www.getsafety.com/blog-posts/javascript-rat-targets-banks"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"ba11d0f0f113a5450723e70d8fdb98af0aefc1a865cc348e54596875950ed10a","import_time":"2025-12-02T09:09:46.185800209Z","id":"RLMA-2025-05753","modified_time":"2025-12-01T13:08:09Z","versions":["1.250609.10947","1.250609.11004","1.250609.11009","1.250609.11032","1.250609.11057","1.250609.11312","1.250609.11537","1.250609.12002","1.250610.11146","1.250610.11611","1.250611.11442","1.250611.11609","1.250617.11924","1.250618.10946","1.250618.11401","1.250618.11438","1.250618.11511","1.250618.11625","1.250618.11629","1.250618.12153","1.250619.11041","1.250620.10922","1.250630.12103","1.250722.11818","1.250809.11036","1.250816.10037","1.250816.10749","1.250817.11821","1.250817.11832","1.250820.12226","1.250907.11732","1.250910.11833","1.250916.11857","1.250917.11521","1.250918.11853","1.250924.11809","1.251002.11818"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0