目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡
← 返回恶意软件包
npm active

ldhemrdhs92007

MAL-2025-48708
2025-12-02 09:12:15
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境，并排查凭据泄露和异常网络连接。

Summary

Malicious code in ldhemrdhs92007 (npm)

AI 分析整理qwen3.6
基于上游报告生成，请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
3
数据源
npmjs.org
下载量只代表仓库活动度，不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmldhemrdhs92007*
npmldhemrdhs920071.250701.10924
npmldhemrdhs920071.250701.10929
npmldhemrdhs920071.250701.10934
npmldhemrdhs920071.250701.10939
npmldhemrdhs920071.250701.11042
npmldhemrdhs920071.250701.11128
npmldhemrdhs920071.250701.11132
npmldhemrdhs920071.250701.11259
npmldhemrdhs920071.250710.10939
npmldhemrdhs920071.250712.11516
npmldhemrdhs920071.250712.11555
npmldhemrdhs920071.250713.11253
npmldhemrdhs920071.250713.11401
npmldhemrdhs920071.250714.10940
npmldhemrdhs920071.250724.11109
npmldhemrdhs920071.250724.11113
npmldhemrdhs920071.250725.12014
npmldhemrdhs920071.250726.10029
npmldhemrdhs920071.250726.10814
npmldhemrdhs920071.250726.11020
npmldhemrdhs920071.250726.11709
npmldhemrdhs920071.250726.11745
npmldhemrdhs920071.250727.11906
npmldhemrdhs920071.250728.12157
npmldhemrdhs920071.250729.11526
npmldhemrdhs920071.250730.11438
npmldhemrdhs920071.250731.11126
npmldhemrdhs920071.250731.11131
npmldhemrdhs920071.250731.11135
npmldhemrdhs920071.250731.11139
npmldhemrdhs920071.250731.11144
npmldhemrdhs920071.250731.11345
npmldhemrdhs920071.250731.11417
npmldhemrdhs920071.250731.11432
npmldhemrdhs920071.250801.11452
npmldhemrdhs920071.250801.11550
npmldhemrdhs920071.250801.11732
npmldhemrdhs920071.250801.12029
npmldhemrdhs920071.250805.11142
npmldhemrdhs920071.250805.11403
npmldhemrdhs920071.250805.11851
npmldhemrdhs920071.250805.12016
npmldhemrdhs920071.250806.10825
npmldhemrdhs920071.250806.10944
npmldhemrdhs920071.250806.10947
npmldhemrdhs920071.250806.11410
npmldhemrdhs920071.250806.11422
npmldhemrdhs920071.250806.11447
npmldhemrdhs920071.250806.11549
npmldhemrdhs920071.250807.11035
npmldhemrdhs920071.250808.11108
npmldhemrdhs920071.250808.11426
npmldhemrdhs920071.250808.11442
npmldhemrdhs920071.250808.11509
npmldhemrdhs920071.250808.12106
npmldhemrdhs920071.250809.11028
npmldhemrdhs920071.250809.11715
npmldhemrdhs920071.250810.11940
npmldhemrdhs920071.250810.12016
npmldhemrdhs920071.250811.12053
npmldhemrdhs920071.250811.12107
npmldhemrdhs920071.250812.11105
npmldhemrdhs920071.250812.11111
npmldhemrdhs920071.250814.11124
npmldhemrdhs920071.250814.11833
npmldhemrdhs920071.250814.11914
npmldhemrdhs920071.250817.11654
npmldhemrdhs920071.250819.11906
npmldhemrdhs920071.250820.10848
npmldhemrdhs920071.250820.10852
npmldhemrdhs920071.250820.10911
npmldhemrdhs920071.250820.10921
npmldhemrdhs920071.250820.10926
npmldhemrdhs920071.250820.10929
npmldhemrdhs920071.250820.11314
npmldhemrdhs920071.250820.11324
npmldhemrdhs920071.250820.11334
npmldhemrdhs920071.250820.11958
npmldhemrdhs920071.250821.11346
npmldhemrdhs920071.250821.11923
npmldhemrdhs920071.250822.10945
npmldhemrdhs920071.250822.11140
npmldhemrdhs920071.250829.11329
npmldhemrdhs920071.250829.11355
npmldhemrdhs920071.250829.11408
npmldhemrdhs920071.250905.11009
npmldhemrdhs920071.250905.11020
npmldhemrdhs920071.251009.11018
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2025-12-02T09:12:15Z","published":"2025-10-26T19:03:27Z","schema_version":"1.7.4","id":"MAL-2025-48708","summary":"Malicious code in ldhemrdhs92007 (npm)","details":"The package ldhemrdhs92007 was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"ldhemrdhs92007"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.250701.10924","1.250701.10929","1.250701.10934","1.250701.10939","1.250701.11042","1.250701.11128","1.250701.11132","1.250701.11259","1.250710.10939","1.250712.11516","1.250712.11555","1.250713.11253","1.250713.11401","1.250714.10940","1.250724.11109","1.250724.11113","1.250725.12014","1.250726.10029","1.250726.10814","1.250726.11020","1.250726.11709","1.250726.11745","1.250727.11906","1.250728.12157","1.250729.11526","1.250730.11438","1.250731.11126","1.250731.11131","1.250731.11135","1.250731.11139","1.250731.11144","1.250731.11345","1.250731.11417","1.250731.11432","1.250801.11452","1.250801.11550","1.250801.11732","1.250801.12029","1.250805.11142","1.250805.11403","1.250805.11851","1.250805.12016","1.250806.10825","1.250806.10944","1.250806.10947","1.250806.11410","1.250806.11422","1.250806.11447","1.250806.11549","1.250807.11035","1.250808.11108","1.250808.11426","1.250808.11442","1.250808.11509","1.250808.12106","1.250809.11028","1.250809.11715","1.250810.11940","1.250810.12016","1.250811.12053","1.250811.12107","1.250812.11105","1.250812.11111","1.250814.11124","1.250814.11833","1.250814.11914","1.250817.11654","1.250819.11906","1.250820.10848","1.250820.10852","1.250820.10911","1.250820.10921","1.250820.10926","1.250820.10929","1.250820.11314","1.250820.11324","1.250820.11334","1.250820.11958","1.250821.11346","1.250821.11923","1.250822.10945","1.250822.11140","1.250829.11329","1.250829.11355","1.250829.11408","1.250905.11009","1.250905.11020","1.251009.11018"]}],"references":[{"type":"WEB","url":"https://www.getsafety.com/blog-posts/javascript-rat-targets-banks"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"f0684ca05cb2bc623eff36c4ac08d1aa063e1fe0ae77555df6ab00d85cb7404b","import_time":"2025-12-02T09:09:49.723475273Z","id":"RLMA-2025-05837","modified_time":"2025-12-01T13:15:26Z","versions":["1.250701.10924","1.250701.10929","1.250701.10934","1.250701.10939","1.250701.11042","1.250701.11128","1.250701.11132","1.250701.11259","1.250710.10939","1.250712.11516","1.250712.11555","1.250713.11253","1.250713.11401","1.250714.10940","1.250724.11109","1.250724.11113","1.250725.12014","1.250726.10029","1.250726.10814","1.250726.11020","1.250726.11709","1.250726.11745","1.250727.11906","1.250728.12157","1.250729.11526","1.250730.11438","1.250731.11126","1.250731.11131","1.250731.11135","1.250731.11139","1.250731.11144","1.250731.11345","1.250731.11417","1.250731.11432","1.250801.11452","1.250801.11550","1.250801.11732","1.250801.12029","1.250805.11142","1.250805.11403","1.250805.11851","1.250805.12016","1.250806.10825","1.250806.10944","1.250806.10947","1.250806.11410","1.250806.11422","1.250806.11447","1.250806.11549","1.250807.11035","1.250808.11108","1.250808.11426","1.250808.11442","1.250808.11509","1.250808.12106","1.250809.11028","1.250809.11715","1.250810.11940","1.250810.12016","1.250811.12053","1.250811.12107","1.250812.11105","1.250812.11111","1.250814.11124","1.250814.11833","1.250814.11914","1.250817.11654","1.250819.11906","1.250820.10848","1.250820.10852","1.250820.10911","1.250820.10921","1.250820.10926","1.250820.10929","1.250820.11314","1.250820.11324","1.250820.11334","1.250820.11958","1.250821.11346","1.250821.11923","1.250822.10945","1.250822.11140","1.250829.11329","1.250829.11355","1.250829.11408","1.250905.11009","1.250905.11020","1.251009.11018"]}]}}

数据来源：OpenSSF Malicious Packages · Apache-2.0