MAL-2023-8731

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@unilin/dlw.scbase.staticsite/MAL-2023-8731.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2023-8731

Published

2023-12-20T00:11:19Z

Modified

2023-12-21T03:34:18Z

Summary

Malicious code in @unilin/dlw.scbase.staticsite (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (79abbb721270b1006f42d07a2af44116ea33ce6faf62ec8325f4a48cdcdf0ef0)

The OpenSSF Package Analysis project identified '@unilin/dlw.scbase.staticsite' @ 9999.10.11 (npm) as malicious.

It is considered malicious because:

The package executes one or more commands associated with malicious behavior.

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2023-12-21T03:33:54.66711771Z",
            "modified_time": "2023-12-20T00:35:49Z",
            "sha256": "79abbb721270b1006f42d07a2af44116ea33ce6faf62ec8325f4a48cdcdf0ef0",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.10.11"
            ]
        },
        {
            "import_time": "2023-12-21T03:33:54.425500202Z",
            "modified_time": "2023-12-20T00:19:59Z",
            "sha256": "b09b712d1f202967dfb4282d7fc5bf1bf968c4614326269ac503a69f50ab5ea7",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.10.10"
            ]
        },
        {
            "import_time": "2023-12-21T03:33:54.177916223Z",
            "modified_time": "2023-12-20T00:11:19Z",
            "sha256": "baab3770f06160cc27c4d74d197f50310587a36b60b5dcb55adb46b30757c8e7",
            "source": "ossf-package-analysis",
            "versions": [
                "9999.10.9"
            ]
        }
    ]
}

Credits

- OpenSSF: Package Analysis - FINDER
- - https://github.com/ossf/package-analysis
  - https://openssf.slack.com/channels/package_analysis

Affected packages

npm / @unilin/dlw.scbase.staticsite

Package

Name: @unilin/dlw.scbase.staticsite; View open source insights on deps.dev
Purl: pkg:npm/%40unilin/dlw.scbase.staticsite

Affected ranges

Affected versions

9999.*

9999.10.9

9999.10.10

9999.10.11

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@unilin/dlw.scbase.staticsite/MAL-2023-8731.json"