{"id":"MAL-2023-1155","summary":"Malicious code in dist-web (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ff355bd5f2422ce630aeb0652869d4bdaa8f3f18cf576fc60a76588f3acf36b4)\nThe OpenSSF Package Analysis project identified 'dist-web' @ 99.1.1 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","aliases":["SNYK-JS-DISTWEB-3336018"],"modified":"2024-06-28T03:14:34.020500Z","published":"2023-04-29T10:31:12Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:15:20.262996063Z","modified_time":"2023-04-29T10:31:12.763365523Z","sha256":"ff355bd5f2422ce630aeb0652869d4bdaa8f3f18cf576fc60a76588f3acf36b4","source":"ossf-package-analysis","versions":["99.1.1"]},{"id":"RLMA-2024-00737","import_time":"2024-06-28T02:42:41.270046786Z","modified_time":"2024-06-25T12:36:49Z","sha256":"978a5282b2566483a749e761bc1454a61c260fd6dffd0ab8fafa9a8a6d253e6a","source":"reversing-labs","versions":["99.1.1","99.1.2"]}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-DISTWEB-3336018"}],"affected":[{"package":{"name":"dist-web","ecosystem":"npm","purl":"pkg:npm/dist-web"},"versions":["99.1.1","99.1.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dist-web/MAL-2023-1155.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}