{"id":"MAL-2023-1334","summary":"Malicious code in verycoolzpac (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587)\nThe OpenSSF Package Analysis project identified 'verycoolzpac' @ 0.39.9999 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-06-28T02:53:18Z","published":"2023-05-12T03:49:58Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:15:53.278832363Z","modified_time":"2023-05-12T03:53:11.865054495Z","sha256":"353d71cbdc52244d23bd12e410763727b638fda3756e0fb348c4e7159ee70b49","source":"ossf-package-analysis","versions":["0.3.7"]},{"versions":["0.39.9999"],"import_time":"2023-08-10T06:15:53.51822699Z","modified_time":"2023-05-12T03:56:30.900430314Z","sha256":"5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587","source":"ossf-package-analysis"},{"source":"ossf-package-analysis","versions":["0.3.1"],"import_time":"2023-08-10T06:15:53.068767234Z","modified_time":"2023-05-12T03:49:58.900570777Z","sha256":"fe3a897e9eb8e24c29575d753a81fc9ff82b09f060b8b17d31ce7cab41d4da72"},{"id":"RLMA-2024-02591","import_time":"2024-06-28T02:46:22.917094006Z","modified_time":"2024-06-25T13:18:59Z","sha256":"02d85233b5468b1de2eeea2ef727f57545dbf06c930bf95eb492ba132d47f8c3","source":"reversing-labs","versions":["0.3.4","0.3.9","0.2.9","0.3.1","0.3.3","0.3.2","0.39.9999","0.2.5","0.3.8","0.2.6","0.3.6","0.2.7","0.3.0","0.3.5","0.2.8","0.3.7"]}]},"affected":[{"package":{"name":"verycoolzpac","ecosystem":"npm","purl":"pkg:npm/verycoolzpac"},"versions":["0.3.7","0.39.9999","0.3.1","0.3.4","0.3.9","0.2.9","0.3.3","0.3.2","0.2.5","0.3.8","0.2.6","0.3.6","0.2.7","0.3.0","0.3.5","0.2.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/verycoolzpac/MAL-2023-1334.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}