MAL-2023-1335

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/verycoolzpac2/MAL-2023-1335.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2023-1335
Published
2023-05-12T03:57:53Z
Modified
2024-06-28T02:53:18Z
Summary
Malicious code in verycoolzpac2 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (50b609e8ebccac67716745b1447224238ae17c0a78499f90c48aa684d971cded)

The OpenSSF Package Analysis project identified 'verycoolzpac2' @ 0.0.3 (npm) as malicious.

It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2023-08-10T06:15:53.720854184Z",
            "modified_time": "2023-05-12T03:57:53.932999397Z",
            "versions": [
                "0.0.3"
            ],
            "source": "ossf-package-analysis",
            "sha256": "50b609e8ebccac67716745b1447224238ae17c0a78499f90c48aa684d971cded"
        },
        {
            "import_time": "2023-08-10T06:15:53.967237792Z",
            "modified_time": "2023-05-12T03:59:09.938701084Z",
            "versions": [
                "0.1.6"
            ],
            "source": "ossf-package-analysis",
            "sha256": "83df7a83bbb023eb158c55438fe829b3fc0b411264c5fe79b6a4c0c7cf907306"
        },
        {
            "import_time": "2023-08-10T06:15:54.233829001Z",
            "modified_time": "2023-05-12T04:05:05.399346736Z",
            "versions": [
                "0.2.7"
            ],
            "source": "ossf-package-analysis",
            "sha256": "f5efa0b7bd50ae6aa9aabc94d0dd6d88c58b779163023068fb06f6bd4150e603"
        },
        {
            "import_time": "2024-06-28T02:46:23.062546731Z",
            "modified_time": "2024-06-25T13:18:59Z",
            "versions": [
                "0.2.9",
                "0.0.3",
                "0.1.4",
                "0.1.6",
                "0.2.6",
                "0.2.7",
                "0.1.5",
                "0.0.2",
                "0.0.4",
                "0.2.8"
            ],
            "source": "reversing-labs",
            "sha256": "9dd45c4f0d299830a11ea3617a610aa5b649fdce60713c87133606a7aa027506",
            "id": "RLMA-2024-02592"
        }
    ]
}
References
Credits

Affected packages

npm / verycoolzpac2

Package

Name
verycoolzpac2
View open source insights on deps.dev
Purl
pkg:npm/verycoolzpac2

Affected ranges

Affected versions

0.*
0.0.2
0.0.3
0.0.4
0.1.4
0.1.5
0.1.6
0.2.6
0.2.7
0.2.8
0.2.9

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/verycoolzpac2/MAL-2023-1335.json"