{"id":"MAL-2023-1437","summary":"Malicious code in eslint-plugin-ironfish (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ddb571e2a90d22e958b983fe2578c4dc66915310367953568399aa68773cc77a)\nThe OpenSSF Package Analysis project identified 'eslint-plugin-ironfish' @ 1.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-12-18T05:34:19Z","published":"2023-08-10T18:13:02Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2023-08-10T18:13:02.199241318Z","sha256":"0cf9a139f54d36697640638f053ee13f282d5d4b286225e4e186aa8ed2bee25a","source":"ossf-package-analysis","versions":["99.99.9"],"import_time":"2023-08-10T18:34:12.238463308Z"},{"modified_time":"2023-11-07T12:56:01Z","sha256":"ddb571e2a90d22e958b983fe2578c4dc66915310367953568399aa68773cc77a","source":"ossf-package-analysis","versions":["1.0.1"],"import_time":"2023-11-07T13:05:57.688550357Z"},{"sha256":"bdd370cbf2c7865f6d3d7577fa1f24c7454fb9c6622c425fc2abdb11307e3af3","source":"ossf-package-analysis","versions":["80.0.0"],"import_time":"2023-12-18T05:33:55.88047628Z","modified_time":"2023-12-18T05:16:48Z"}]},"affected":[{"package":{"name":"eslint-plugin-ironfish","ecosystem":"npm","purl":"pkg:npm/eslint-plugin-ironfish"},"versions":["99.99.9","1.0.1","80.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/eslint-plugin-ironfish/MAL-2023-1437.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}