{"id":"MAL-2023-1334","summary":"Malicious code in verycoolzpac (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587)\nThe OpenSSF Package Analysis project identified 'verycoolzpac' @ 0.39.9999 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-06-28T02:53:18Z","published":"2023-05-12T03:49:58Z","database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"353d71cbdc52244d23bd12e410763727b638fda3756e0fb348c4e7159ee70b49","import_time":"2023-08-10T06:15:53.278832363Z","modified_time":"2023-05-12T03:53:11.865054495Z","versions":["0.3.7"]},{"versions":["0.39.9999"],"source":"ossf-package-analysis","sha256":"5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587","import_time":"2023-08-10T06:15:53.51822699Z","modified_time":"2023-05-12T03:56:30.900430314Z"},{"versions":["0.3.1"],"source":"ossf-package-analysis","sha256":"fe3a897e9eb8e24c29575d753a81fc9ff82b09f060b8b17d31ce7cab41d4da72","import_time":"2023-08-10T06:15:53.068767234Z","modified_time":"2023-05-12T03:49:58.900570777Z"},{"source":"reversing-labs","sha256":"02d85233b5468b1de2eeea2ef727f57545dbf06c930bf95eb492ba132d47f8c3","import_time":"2024-06-28T02:46:22.917094006Z","id":"RLMA-2024-02591","modified_time":"2024-06-25T13:18:59Z","versions":["0.3.4","0.3.9","0.2.9","0.3.1","0.3.3","0.3.2","0.39.9999","0.2.5","0.3.8","0.2.6","0.3.6","0.2.7","0.3.0","0.3.5","0.2.8","0.3.7"]}]},"affected":[{"package":{"name":"verycoolzpac","ecosystem":"npm","purl":"pkg:npm/verycoolzpac"},"versions":["0.3.7","0.39.9999","0.3.1","0.3.4","0.3.9","0.2.9","0.3.3","0.3.2","0.2.5","0.3.8","0.2.6","0.3.6","0.2.7","0.3.0","0.3.5","0.2.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/verycoolzpac/MAL-2023-1334.json"}}],"schema_version":"1.9.0","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}