目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
npm active

dhpgemrdhs92007

MAL-2025-48661
2025-12-02 09:12:13
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in dhpgemrdhs92007 (npm)

AI 分析整理qwen3.6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
2
数据源
npmjs.org
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmdhpgemrdhs92007*
npmdhpgemrdhs920071.250613.11337
npmdhpgemrdhs920071.250613.11348
npmdhpgemrdhs920071.250613.11356
npmdhpgemrdhs920071.250613.11359
npmdhpgemrdhs920071.250613.11405
npmdhpgemrdhs920071.250613.11409
npmdhpgemrdhs920071.250613.11623
npmdhpgemrdhs920071.250613.11633
npmdhpgemrdhs920071.250614.11345
npmdhpgemrdhs920071.250614.11914
npmdhpgemrdhs920071.250614.11944
npmdhpgemrdhs920071.250614.12045
npmdhpgemrdhs920071.250614.12049
npmdhpgemrdhs920071.250616.11423
npmdhpgemrdhs920071.250617.11905
npmdhpgemrdhs920071.250618.10904
npmdhpgemrdhs920071.250618.10912
npmdhpgemrdhs920071.250618.10943
npmdhpgemrdhs920071.250618.11316
npmdhpgemrdhs920071.250618.11333
npmdhpgemrdhs920071.250618.11338
npmdhpgemrdhs920071.250618.11350
npmdhpgemrdhs920071.250618.11401
npmdhpgemrdhs920071.250618.11439
npmdhpgemrdhs920071.250618.11446
npmdhpgemrdhs920071.250618.11456
npmdhpgemrdhs920071.250618.11543
npmdhpgemrdhs920071.250618.11613
npmdhpgemrdhs920071.250618.11625
npmdhpgemrdhs920071.250618.11629
npmdhpgemrdhs920071.250618.12154
npmdhpgemrdhs920071.250619.11037
npmdhpgemrdhs920071.250619.11100
npmdhpgemrdhs920071.250620.10922
npmdhpgemrdhs920071.250620.11139
npmdhpgemrdhs920071.250620.11143
npmdhpgemrdhs920071.250620.11152
npmdhpgemrdhs920071.250620.11305
npmdhpgemrdhs920071.250620.11404
npmdhpgemrdhs920071.250620.11516
npmdhpgemrdhs920071.250621.12138
npmdhpgemrdhs920071.250621.12142
npmdhpgemrdhs920071.250621.12150
npmdhpgemrdhs920071.250621.12211
npmdhpgemrdhs920071.250621.12216
npmdhpgemrdhs920071.250621.12219
npmdhpgemrdhs920071.250621.12222
npmdhpgemrdhs920071.250622.11710
npmdhpgemrdhs920071.250622.11729
npmdhpgemrdhs920071.250623.10929
npmdhpgemrdhs920071.250623.11449
npmdhpgemrdhs920071.250623.11557
npmdhpgemrdhs920071.250624.10913
npmdhpgemrdhs920071.250624.11146
npmdhpgemrdhs920071.250624.11313
npmdhpgemrdhs920071.250624.11342
npmdhpgemrdhs920071.250628.11523
npmdhpgemrdhs920071.250628.11529
npmdhpgemrdhs920071.250628.11534
npmdhpgemrdhs920071.250628.11544
npmdhpgemrdhs920071.250628.11547
npmdhpgemrdhs920071.250628.11604
npmdhpgemrdhs920071.250628.11609
npmdhpgemrdhs920071.250628.11802
npmdhpgemrdhs920071.250630.11442
npmdhpgemrdhs920071.250630.11456
npmdhpgemrdhs920071.250630.12016
npmdhpgemrdhs920071.250702.11001
npmdhpgemrdhs920071.250702.11523
npmdhpgemrdhs920071.250702.11629
npmdhpgemrdhs920071.250703.11559
npmdhpgemrdhs920071.250713.11312
npmdhpgemrdhs920071.250725.11617
npmdhpgemrdhs920071.250729.11557
npmdhpgemrdhs920071.250731.10832
npmdhpgemrdhs920071.250806.12030
npmdhpgemrdhs920071.250807.11323
npmdhpgemrdhs920071.250809.11719
npmdhpgemrdhs920071.250813.12031
npmdhpgemrdhs920071.250814.11151
npmdhpgemrdhs920071.250814.11318
npmdhpgemrdhs920071.250814.11410
npmdhpgemrdhs920071.250820.12010
npmdhpgemrdhs920071.250910.11820
npmdhpgemrdhs920071.250918.11409
npmdhpgemrdhs920071.250918.11951
npmdhpgemrdhs920071.250924.11816
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2025-12-02T09:12:13Z","published":"2025-10-26T19:03:27Z","schema_version":"1.7.4","id":"MAL-2025-48661","summary":"Malicious code in dhpgemrdhs92007 (npm)","details":"The package dhpgemrdhs92007 was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"dhpgemrdhs92007"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.250613.11337","1.250613.11348","1.250613.11356","1.250613.11359","1.250613.11405","1.250613.11409","1.250613.11623","1.250613.11633","1.250614.11345","1.250614.11914","1.250614.11944","1.250614.12045","1.250614.12049","1.250616.11423","1.250617.11905","1.250618.10904","1.250618.10912","1.250618.10943","1.250618.11316","1.250618.11333","1.250618.11338","1.250618.11350","1.250618.11401","1.250618.11439","1.250618.11446","1.250618.11456","1.250618.11543","1.250618.11613","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11037","1.250619.11100","1.250620.10922","1.250620.11139","1.250620.11143","1.250620.11152","1.250620.11305","1.250620.11404","1.250620.11516","1.250621.12138","1.250621.12142","1.250621.12150","1.250621.12211","1.250621.12216","1.250621.12219","1.250621.12222","1.250622.11710","1.250622.11729","1.250623.10929","1.250623.11449","1.250623.11557","1.250624.10913","1.250624.11146","1.250624.11313","1.250624.11342","1.250628.11523","1.250628.11529","1.250628.11534","1.250628.11544","1.250628.11547","1.250628.11604","1.250628.11609","1.250628.11802","1.250630.11442","1.250630.11456","1.250630.12016","1.250702.11001","1.250702.11523","1.250702.11629","1.250703.11559","1.250713.11312","1.250725.11617","1.250729.11557","1.250731.10832","1.250806.12030","1.250807.11323","1.250809.11719","1.250813.12031","1.250814.11151","1.250814.11318","1.250814.11410","1.250820.12010","1.250910.11820","1.250918.11409","1.250918.11951","1.250924.11816"]}],"references":[{"type":"WEB","url":"https://www.getsafety.com/blog-posts/javascript-rat-targets-banks"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"9c7ee80fbf4548ed0f39cc90609f1e25fe5a8ad3d0ebb12fd8e6167fe82ef671","import_time":"2025-12-02T09:09:46.375544498Z","id":"RLMA-2025-05755","modified_time":"2025-12-01T13:08:12Z","versions":["1.250613.11337","1.250613.11348","1.250613.11356","1.250613.11359","1.250613.11405","1.250613.11409","1.250613.11623","1.250613.11633","1.250614.11345","1.250614.11914","1.250614.11944","1.250614.12045","1.250614.12049","1.250616.11423","1.250617.11905","1.250618.10904","1.250618.10912","1.250618.10943","1.250618.11316","1.250618.11333","1.250618.11338","1.250618.11350","1.250618.11401","1.250618.11439","1.250618.11446","1.250618.11456","1.250618.11543","1.250618.11613","1.250618.11625","1.250618.11629","1.250618.12154","1.250619.11037","1.250619.11100","1.250620.10922","1.250620.11139","1.250620.11143","1.250620.11152","1.250620.11305","1.250620.11404","1.250620.11516","1.250621.12138","1.250621.12142","1.250621.12150","1.250621.12211","1.250621.12216","1.250621.12219","1.250621.12222","1.250622.11710","1.250622.11729","1.250623.10929","1.250623.11449","1.250623.11557","1.250624.10913","1.250624.11146","1.250624.11313","1.250624.11342","1.250628.11523","1.250628.11529","1.250628.11534","1.250628.11544","1.250628.11547","1.250628.11604","1.250628.11609","1.250628.11802","1.250630.11442","1.250630.11456","1.250630.12016","1.250702.11001","1.250702.11523","1.250702.11629","1.250703.11559","1.250713.11312","1.250725.11617","1.250729.11557","1.250731.10832","1.250806.12030","1.250807.11323","1.250809.11719","1.250813.12031","1.250814.11151","1.250814.11318","1.250814.11410","1.250820.12010","1.250910.11820","1.250918.11409","1.250918.11951","1.250924.11816"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0