MAL-2023-1290

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/scuid-x/MAL-2023-1290.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2023-1290
Published
2023-04-29T05:28:15Z
Modified
2023-08-10T06:17:49Z
Summary
Malicious code in scuid-x (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (0f81b2e690e5ecaa536cc321727566547b6adc4baa770b6b4c7666e29e262e83)

The OpenSSF Package Analysis project identified 'scuid-x' @ 1.0.3 (npm) as malicious.

It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2023-08-10T06:15:17.16112056Z",
            "source": "ossf-package-analysis",
            "sha256": "0f81b2e690e5ecaa536cc321727566547b6adc4baa770b6b4c7666e29e262e83",
            "versions": [
                "1.0.3"
            ],
            "modified_time": "2023-04-29T05:29:39.915961122Z"
        },
        {
            "import_time": "2023-08-10T06:15:16.883582775Z",
            "source": "ossf-package-analysis",
            "sha256": "46582ae2f5085cfc2ba8d62263c209c28d805b0ad569c5aa23774874e180572f",
            "versions": [
                "5.2.1"
            ],
            "modified_time": "2023-04-29T05:28:15.509379542Z"
        },
        {
            "import_time": "2023-08-10T06:15:17.425455359Z",
            "source": "ossf-package-analysis",
            "sha256": "ceedaf5a688393b833bcd1bc0507c7021cb57fdb2f2325a3c4d5668ce4938266",
            "versions": [
                "5.2.3"
            ],
            "modified_time": "2023-04-29T05:30:53.804842624Z"
        }
    ]
}
References
Credits

Affected packages

npm / scuid-x

Package

Name
scuid-x
View open source insights on deps.dev
Purl
pkg:npm/scuid-x

Affected ranges

Affected versions

1.*
1.0.3
5.*
5.2.1
5.2.3

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/scuid-x/MAL-2023-1290.json"