{"id":"MAL-2023-1353","summary":"Malicious code in zsbpwebsdktest3 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (a25d6ab5c8c52c4020f38d78237f6c953a826c3e8abc287370befada0727c50a)\nThe OpenSSF Package Analysis project identified 'zsbpwebsdktest3' @ 9999.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","aliases":["SNYK-JS-ZSBPWEBSDKTEST3-3336013"],"modified":"2024-06-28T03:14:44.874555Z","published":"2023-05-01T09:56:32Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:15:28.180568618Z","modified_time":"2023-05-01T09:56:32.324980459Z","sha256":"a25d6ab5c8c52c4020f38d78237f6c953a826c3e8abc287370befada0727c50a","source":"ossf-package-analysis","versions":["9999.9.9"]},{"source":"reversing-labs","versions":["9999.999.990","9999.999.99","9999.9.9"],"id":"RLMA-2024-02769","import_time":"2024-06-28T02:46:43.92468079Z","modified_time":"2024-06-25T13:23:04Z","sha256":"9453cb7f6a315af5868661826dbce41c7a2148617d80fb344c14a0e7cee19ffb"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-ZSBPWEBSDKTEST3-3336013"}],"affected":[{"package":{"name":"zsbpwebsdktest3","ecosystem":"npm","purl":"pkg:npm/zsbpwebsdktest3"},"versions":["9999.9.9","9999.999.990","9999.999.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/zsbpwebsdktest3/MAL-2023-1353.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}