{"id":"MAL-2023-1093","summary":"Malicious code in @nursefly/tokens (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (67db4432b0d3ed2a9b007e0217f5f43f83bdd6d9a6b663e223add648e2ace36c)\nThe OpenSSF Package Analysis project identified '@nursefly/tokens' @ 46.46.47 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","modified":"2023-08-10T06:17:47Z","published":"2023-06-27T14:40:59Z","database_specific":{"malicious-packages-origins":[{"versions":["46.46.47"],"import_time":"2023-08-10T06:16:23.106104558Z","modified_time":"2023-06-27T15:01:42.865771577Z","sha256":"67db4432b0d3ed2a9b007e0217f5f43f83bdd6d9a6b663e223add648e2ace36c","source":"ossf-package-analysis"},{"sha256":"f18552e30e10e72e5211532a1c181284f90338784021ed7dc07551ef7573b27b","source":"ossf-package-analysis","versions":["45.45.45"],"import_time":"2023-08-10T06:16:22.853901551Z","modified_time":"2023-06-27T14:40:59.233237888Z"}]},"affected":[{"package":{"name":"@nursefly/tokens","ecosystem":"npm","purl":"pkg:npm/%40nursefly/tokens"},"versions":["46.46.47","45.45.45"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@nursefly/tokens/MAL-2023-1093.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}