{"id":"MAL-2023-1298","summary":"Malicious code in smart-commons (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6)\nThe OpenSSF Package Analysis project identified 'smart-commons' @ 19.6.1 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","aliases":["SNYK-JS-SMARTCOMMONS-3336086"],"modified":"2024-06-28T03:14:40.477318Z","published":"2023-04-30T22:44:09Z","database_specific":{"malicious-packages-origins":[{"versions":["19.6.1"],"import_time":"2023-08-10T06:15:24.122729675Z","modified_time":"2023-04-30T22:44:09.194360713Z","sha256":"3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6","source":"ossf-package-analysis"},{"import_time":"2024-06-28T02:44:45.241752346Z","modified_time":"2024-06-25T13:00:58Z","sha256":"93a46300ed9ba9985268ca44bdf977c7299da81e64ce218c838cdc385c08586e","source":"reversing-labs","versions":["6.6.1","9.6.1","19.6.1","2.2.4","7.6.1","8.6.1","3.2.4","4.2.4"],"id":"RLMA-2024-01754"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-SMARTCOMMONS-3336086"}],"affected":[{"package":{"name":"smart-commons","ecosystem":"npm","purl":"pkg:npm/smart-commons"},"versions":["19.6.1","6.6.1","9.6.1","2.2.4","7.6.1","8.6.1","3.2.4","4.2.4"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/smart-commons/MAL-2023-1298.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}