MAL-2023-1352

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/zsbpwebsdktest/MAL-2023-1352.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2023-1352

Aliases

SNYK-JS-ZSBPWEBSDKTEST-3336058

Published

2023-04-30T22:47:33Z

Modified

2024-06-28T03:14:44.728976Z

Summary

Malicious code in zsbpwebsdktest (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (347bc418b55e9092cd6a48ff3f93f328085fa2c4192ba6dc2c5cf062c3d10c20)

The OpenSSF Package Analysis project identified 'zsbpwebsdktest' @ 9999.99.91 (npm) as malicious.

It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "347bc418b55e9092cd6a48ff3f93f328085fa2c4192ba6dc2c5cf062c3d10c20",
            "import_time": "2023-08-10T06:15:24.612539899Z",
            "modified_time": "2023-04-30T22:49:03.845589205Z",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.99.91"
            ]
        },
        {
            "sha256": "7f468159af12dd8260d168a24eec1dfc24cc2b4d53dd50995b63c1610030c7fe",
            "import_time": "2023-08-10T06:15:25.60716465Z",
            "modified_time": "2023-04-30T23:07:47.020846236Z",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.99.94"
            ]
        },
        {
            "sha256": "ac0279e9d0c2e89cafb5c0e1c5c350fbb2f36f22b9eaa8c835253e8b81a17d59",
            "import_time": "2023-08-10T06:15:24.850556918Z",
            "modified_time": "2023-04-30T22:53:24.973669736Z",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.99.92"
            ]
        },
        {
            "sha256": "c61c460815092f38ce628b39be2d3117a2bbbc322185cdf029331a3f0e7b1672",
            "import_time": "2023-08-10T06:15:24.370930947Z",
            "modified_time": "2023-04-30T22:47:33.991908296Z",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.99.9"
            ]
        },
        {
            "versions": [
                "9999.99.9",
                "9999.99.93",
                "9999.99.92",
                "9999.99.94",
                "9999.99.91"
            ],
            "sha256": "e1a76a63243609282152fe36063a71f0f6f1cba844c1330ba32042f5a15a4c52",
            "import_time": "2024-06-28T02:46:43.681084408Z",
            "modified_time": "2024-06-25T13:22:58Z",
            "source": "reversing-labs",
            "id": "RLMA-2024-02767"
        }
    ]
}

References

https://security.snyk.io/vuln/SNYK-JS-ZSBPWEBSDKTEST-3336058

Credits

- OpenSSF: Package Analysis - FINDER
- - https://github.com/ossf/package-analysis
  - https://openssf.slack.com/channels/package_analysis
- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / zsbpwebsdktest

Package

Name: zsbpwebsdktest; View open source insights on deps.dev
Purl: pkg:npm/zsbpwebsdktest

Affected ranges

Affected versions

9999.*

9999.99.9

9999.99.91

9999.99.92

9999.99.93

9999.99.94

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/zsbpwebsdktest/MAL-2023-1352.json"