{"id":"MAL-2023-1085","summary":"Malicious code in @mddsfmsdflm/itemselector (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174)\nThe OpenSSF Package Analysis project identified '@mddsfmsdflm/itemselector' @ 103.0.9 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-08-10T06:17:47Z","published":"2023-05-30T03:51:56Z","database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","versions":["103.0.9"],"import_time":"2023-08-10T06:16:07.798283613Z","modified_time":"2023-05-30T04:22:56.17493736Z","sha256":"88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174"},{"source":"ossf-package-analysis","versions":["101.0.9"],"import_time":"2023-08-10T06:17:18.778540772Z","modified_time":"2023-05-30T03:51:56.496231963Z","sha256":"e43f5c278cf04d04a76bb97df7bc05ff45c3e7b941c682bbd619faf788b39999"}]},"affected":[{"package":{"name":"@mddsfmsdflm/itemselector","ecosystem":"npm","purl":"pkg:npm/%40mddsfmsdflm/itemselector"},"versions":["103.0.9","101.0.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@mddsfmsdflm/itemselector/MAL-2023-1085.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}