{"id":"MAL-2023-1327","summary":"Malicious code in uitk-react-action-list-item (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (c5ae6c09c0106f49a13c2a2b42ec5ae87f855fce905b95188d6645f263a17bf8)\nThe OpenSSF Package Analysis project identified 'uitk-react-action-list-item' @ 99.99.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-08-27T06:08:48Z","published":"2023-07-25T11:16:54Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:16:43.022961414Z","modified_time":"2023-07-25T11:16:54.288212203Z","sha256":"b5c01f2e36463475840a6428268e7fe822c74c1da38984c51f2be465ec2eb204","source":"ossf-package-analysis","versions":["25.1.13"]},{"import_time":"2025-08-27T06:08:20.488925297Z","modified_time":"2025-08-26T15:10:58Z","sha256":"c5ae6c09c0106f49a13c2a2b42ec5ae87f855fce905b95188d6645f263a17bf8","source":"ossf-package-analysis","versions":["99.99.1"]}]},"affected":[{"package":{"name":"uitk-react-action-list-item","ecosystem":"npm","purl":"pkg:npm/uitk-react-action-list-item"},"versions":["25.1.13","99.99.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/uitk-react-action-list-item/MAL-2023-1327.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}