{"id":"MAL-2023-1290","summary":"Malicious code in scuid-x (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0f81b2e690e5ecaa536cc321727566547b6adc4baa770b6b4c7666e29e262e83)\nThe OpenSSF Package Analysis project identified 'scuid-x' @ 1.0.3 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","modified":"2023-08-10T06:17:49Z","published":"2023-04-29T05:28:15Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:15:17.16112056Z","modified_time":"2023-04-29T05:29:39.915961122Z","sha256":"0f81b2e690e5ecaa536cc321727566547b6adc4baa770b6b4c7666e29e262e83","source":"ossf-package-analysis","versions":["1.0.3"]},{"import_time":"2023-08-10T06:15:16.883582775Z","modified_time":"2023-04-29T05:28:15.509379542Z","sha256":"46582ae2f5085cfc2ba8d62263c209c28d805b0ad569c5aa23774874e180572f","source":"ossf-package-analysis","versions":["5.2.1"]},{"source":"ossf-package-analysis","versions":["5.2.3"],"import_time":"2023-08-10T06:15:17.425455359Z","modified_time":"2023-04-29T05:30:53.804842624Z","sha256":"ceedaf5a688393b833bcd1bc0507c7021cb57fdb2f2325a3c4d5668ce4938266"}]},"affected":[{"package":{"name":"scuid-x","ecosystem":"npm","purl":"pkg:npm/scuid-x"},"versions":["1.0.3","5.2.1","5.2.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/scuid-x/MAL-2023-1290.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}