MAL-2025-696

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/vscode-bazel-bsp/MAL-2025-696.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-696
Published
2025-01-30T16:55:51Z
Modified
2025-03-03T15:08:01Z
Summary
Malicious code in vscode-bazel-bsp (npm)
Details

The package communicates with a domain associated with malicious activity.

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2025-01171",
            "modified_time": "2025-03-03T13:43:12Z",
            "source": "reversing-labs",
            "import_time": "2025-03-03T15:07:11.487575853Z",
            "versions": [
                "8.0.0"
            ],
            "sha256": "730069dade79bc7d71db5ea61b27fb5a68527b66b25f27a8db33a439d126dfdc"
        }
    ]
}
References
Credits

Affected packages

npm / vscode-bazel-bsp

Package

Name
vscode-bazel-bsp
View open source insights on deps.dev
Purl
pkg:npm/vscode-bazel-bsp

Affected ranges

Affected versions

1.*

1.0.0

8.*

8.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/vscode-bazel-bsp/MAL-2025-696.json"