{"id":"MAL-2023-1174","summary":"Malicious code in eslint-config-ironfish (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (3c131e05243f24fb2099561dacc47fb3017389f480a323ac185ed3271a6907de)\nThe OpenSSF Package Analysis project identified 'eslint-config-ironfish' @ 99.3.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2023-12-18T05:05:19Z","published":"2023-08-09T15:36:58Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:17:38.716100545Z","modified_time":"2023-08-09T15:36:58.092525264Z","sha256":"89fc9d8c70016091f419645795b07f2620c87dbd0828e099325edcb1e13de128","source":"ossf-package-analysis","versions":["0.0.1"]},{"modified_time":"2023-08-27T20:02:38Z","sha256":"3c131e05243f24fb2099561dacc47fb3017389f480a323ac185ed3271a6907de","source":"ossf-package-analysis","versions":["99.3.0"],"import_time":"2023-08-27T20:05:16.95288433Z"},{"import_time":"2023-12-16T17:33:44.994168155Z","modified_time":"2023-12-16T17:28:48Z","sha256":"8c740bed2c62c376fc8ffcb1b6b6ad7f0586cd458a06038e803f87339ae70dc1","source":"ossf-package-analysis","versions":["85.0.0"]},{"sha256":"68a01b7058f8de3e223be121acd100c8edcf85ad228e90957dd54bfa834d4527","source":"ossf-package-analysis","versions":["87.0.0"],"import_time":"2023-12-18T05:05:04.057465107Z","modified_time":"2023-12-18T04:37:57Z"}]},"affected":[{"package":{"name":"eslint-config-ironfish","ecosystem":"npm","purl":"pkg:npm/eslint-config-ironfish"},"versions":["0.0.1","99.3.0","85.0.0","87.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/eslint-config-ironfish/MAL-2023-1174.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}