{"id":"MAL-2023-1273","summary":"Malicious code in proton-account (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (edfb8318aed91ce8eb51e269ae47766d501e4e03c1b95f4327570493b4b1379c)\nThe OpenSSF Package Analysis project identified 'proton-account' @ 99.99.999 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","aliases":["GHSA-qfj4-8q57-wpmh","SNYK-JS-PROTONACCOUNT-3326385"],"modified":"2026-09-01T11:40:32.341834218Z","published":"2023-05-02T06:41:45Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:15:31.2763651Z","modified_time":"2023-05-02T06:41:45.818958635Z","sha256":"edfb8318aed91ce8eb51e269ae47766d501e4e03c1b95f4327570493b4b1379c","source":"ossf-package-analysis","versions":["99.99.999"]},{"source":"reversing-labs","versions":["99.99.99","99.99.999","99.99.9999"],"id":"RLMA-2026-05235","import_time":"2026-07-09T09:16:44.009482818Z","modified_time":"2026-07-07T13:05:21Z","sha256":"a3906f02579ee568a2dcd6f465246219fcae1864ff7fa0ad33cd80f1e0a74c4f"},{"sha256":"5b75d5e9e3c2ba75580ad32115cc4830dcd731041baffc5e47349d0db20c4adb","source":"reversing-labs","id":"RLUA-2026-06397","import_time":"2026-09-01T11:18:17.732650662Z","modified_time":"2026-08-24T17:05:26Z"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-PROTONACCOUNT-3326385"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qfj4-8q57-wpmh"}],"affected":[{"package":{"name":"proton-account","ecosystem":"npm","purl":"pkg:npm/proton-account"},"versions":["99.99.999","99.99.99","99.99.9999"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/proton-account/MAL-2023-1273.json"}}],"schema_version":"1.9.0","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}