目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%
← 返回恶意软件包
npm active

dazz-redirects

MAL-2026-1705
2026-03-23 05:16:26
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境,并排查凭据泄露和异常网络连接。

Summary

Malicious code in dazz-redirects (npm)

文件/数据外传
AI 分析整理qwen3.6
基于上游报告生成,请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
—
数据源
npmjs.org
下载量只代表仓库活动度,不等于已被入侵的安装数量。
受影响版本
EcosystemPackageVersion
npmdazz-redirects1.0.0
npmdazz-redirects1.0.1
npmdazz-redirects4.10.1
npmdazz-redirects4.10.10
npmdazz-redirects4.10.11
npmdazz-redirects4.10.12
npmdazz-redirects4.10.13
npmdazz-redirects4.10.14
npmdazz-redirects4.10.15
npmdazz-redirects4.10.16
npmdazz-redirects4.10.17
npmdazz-redirects4.10.18
npmdazz-redirects4.10.19
npmdazz-redirects4.10.2
npmdazz-redirects4.10.20
npmdazz-redirects4.10.21
npmdazz-redirects4.10.22
npmdazz-redirects4.10.23
npmdazz-redirects4.10.24
npmdazz-redirects4.10.25
npmdazz-redirects4.10.26
npmdazz-redirects4.10.27
npmdazz-redirects4.10.28
npmdazz-redirects4.10.29
npmdazz-redirects4.10.3
npmdazz-redirects4.10.30
npmdazz-redirects4.10.31
npmdazz-redirects4.10.32
npmdazz-redirects4.10.33
npmdazz-redirects4.10.34
npmdazz-redirects4.10.35
npmdazz-redirects4.10.36
npmdazz-redirects4.10.37
npmdazz-redirects4.10.38
npmdazz-redirects4.10.39
npmdazz-redirects4.10.4
npmdazz-redirects4.10.43
npmdazz-redirects4.10.45
npmdazz-redirects4.10.46
npmdazz-redirects4.10.5
npmdazz-redirects4.10.50
npmdazz-redirects4.10.52
npmdazz-redirects4.10.53
npmdazz-redirects4.10.55
npmdazz-redirects4.10.57
npmdazz-redirects4.10.58
npmdazz-redirects4.10.59
npmdazz-redirects4.10.6
npmdazz-redirects4.10.61
npmdazz-redirects4.10.63
npmdazz-redirects4.10.66
npmdazz-redirects4.10.67
npmdazz-redirects4.10.68
npmdazz-redirects4.10.69
npmdazz-redirects4.10.7
npmdazz-redirects4.10.70
npmdazz-redirects4.10.74
npmdazz-redirects4.10.77
npmdazz-redirects4.10.78
npmdazz-redirects4.10.8
npmdazz-redirects4.10.80
npmdazz-redirects4.10.82
npmdazz-redirects4.10.86
npmdazz-redirects4.10.89
npmdazz-redirects4.10.9
npmdazz-redirects4.10.93
npmdazz-redirects4.10.95
npmdazz-redirects4.10.96
npmdazz-redirects99.999.99
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"modified":"2026-03-23T05:16:26Z","published":"2026-03-18T12:46:07Z","schema_version":"1.7.4","id":"MAL-2026-1705","summary":"Malicious code in dazz-redirects (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8bb7f0fb09aa6ba372227ff0fc3cfc80e28c609fc7b2e9c22965972f9771a988)\nThe package dazz-redirects was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"dazz-redirects","purl":"pkg:npm/dazz-redirects"},"versions":["1.0.0","1.0.1","4.10.1","4.10.2","4.10.3","4.10.4","4.10.5","4.10.6","4.10.7","4.10.8","4.10.9","4.10.10","4.10.11","4.10.12","4.10.13","4.10.14","4.10.15","4.10.16","4.10.17","4.10.18","4.10.19","4.10.20","4.10.21","4.10.22","4.10.23","4.10.24","4.10.25","4.10.26","4.10.27","4.10.28","4.10.29","4.10.30","4.10.31","4.10.32","4.10.33","4.10.34","4.10.35","4.10.36","4.10.37","4.10.38","4.10.39","4.10.43","4.10.45","4.10.46","4.10.50","4.10.52","4.10.53","4.10.55","4.10.57","4.10.58","4.10.59","4.10.61","4.10.63","4.10.66","4.10.67","4.10.68","4.10.69","4.10.70","4.10.74","4.10.77","4.10.78","4.10.80","4.10.82","4.10.86","4.10.89","4.10.93","4.10.95","4.10.96","99.999.99"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"6ea3eefb7afa1b3c7dbb2fc7a9d073de3ddc9f807364d91caf4ed14df8cff5ed","import_time":"2026-03-19T12:18:44.679297099Z","id":"RLMA-2026-01236","modified_time":"2026-03-18T12:46:07Z","versions":["1.0.0","1.0.1","4.10.1","4.10.2","4.10.3","4.10.4","4.10.5","4.10.6","4.10.7","4.10.8","4.10.9","4.10.10","4.10.11","4.10.12","4.10.13","4.10.14","4.10.15","4.10.16","4.10.17","4.10.18","4.10.19","4.10.20","4.10.21","4.10.22","4.10.23","4.10.24","4.10.25","4.10.26","4.10.27","4.10.28","4.10.29","4.10.30","4.10.31","4.10.32","4.10.33","4.10.34","4.10.35","4.10.36","4.10.37","4.10.38","4.10.39","4.10.43","4.10.45","4.10.46","4.10.50","4.10.52","4.10.53","4.10.55","4.10.57","4.10.58","4.10.59","4.10.61","4.10.63","4.10.66","4.10.67","4.10.68","4.10.69","4.10.70","4.10.74","4.10.77","4.10.78","4.10.80","4.10.82","4.10.86","4.10.89","4.10.93","4.10.95","4.10.96","99.999.99"]},{"source":"amazon-inspector","sha256":"8bb7f0fb09aa6ba372227ff0fc3cfc80e28c609fc7b2e9c22965972f9771a988","import_time":"2026-03-23T05:14:06.012013077Z","modified_time":"2026-03-23T05:11:41Z","versions":["1.0.0","1.0.1","4.10.1","4.10.2","4.10.3","4.10.4","4.10.5","4.10.6","4.10.7","4.10.8","4.10.9","4.10.10","4.10.11","4.10.12","4.10.13","4.10.14","4.10.15","4.10.16","4.10.17","4.10.18","4.10.19","4.10.20","4.10.21","4.10.22","4.10.23","4.10.24","4.10.25","4.10.26","4.10.27","4.10.28","4.10.29","4.10.30","4.10.31","4.10.32","4.10.33","4.10.34","4.10.35","4.10.36","4.10.37","4.10.38","4.10.39","4.10.43","4.10.45","4.10.46","4.10.50","4.10.52","4.10.53","4.10.55","4.10.57","4.10.58","4.10.59","4.10.61","4.10.63","4.10.66","4.10.67","4.10.68","4.10.69","4.10.70","4.10.74","4.10.77","4.10.78","4.10.80","4.10.82","4.10.86","4.10.89","4.10.93","4.10.95","4.10.96","99.999.99"]}]}}

数据来源:OpenSSF Malicious Packages · Apache-2.0