MAL-2023-1298

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/smart-commons/MAL-2023-1298.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2023-1298
Aliases
  • SNYK-JS-SMARTCOMMONS-3336086
Published
2023-04-30T22:44:09Z
Modified
2024-06-28T03:14:40Z
Summary
Malicious code in smart-commons (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6)

The OpenSSF Package Analysis project identified 'smart-commons' @ 19.6.1 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2023-08-10T06:15:24.122729675Z",
            "modified_time": "2023-04-30T22:44:09.194360713Z",
            "sha256": "3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6",
            "source": "ossf-package-analysis",
            "versions": [
                "19.6.1"
            ]
        },
        {
            "id": "RLMA-2024-01754",
            "import_time": "2024-06-28T02:44:45.241752346Z",
            "modified_time": "2024-06-25T13:00:58Z",
            "sha256": "93a46300ed9ba9985268ca44bdf977c7299da81e64ce218c838cdc385c08586e",
            "source": "reversing-labs",
            "versions": [
                "6.6.1",
                "9.6.1",
                "19.6.1",
                "2.2.4",
                "7.6.1",
                "8.6.1",
                "3.2.4",
                "4.2.4"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / smart-commons

Package

Name
smart-commons
View open source insights on deps.dev
Purl
pkg:npm/smart-commons

Affected ranges

Affected versions

2.*
2.2.4
3.*
3.2.4
4.*
4.2.4
6.*
6.6.1
7.*
7.6.1
8.*
8.6.1
9.*
9.6.1
19.*
19.6.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/smart-commons/MAL-2023-1298.json"