{"id":"MAL-2023-1453","summary":"Malicious code in marvelmaniac-reddit-rce (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (4e0c11328bba9ebf6da62d82fc149892918b5830eef9816b5f887c46f1108fa0)\nThe OpenSSF Package Analysis project identified 'marvelmaniac-reddit-rce' @ 10.0.3 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-08-14T11:10:12Z","published":"2023-08-14T08:40:40Z","database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","versions":["1.1.1"],"import_time":"2023-08-14T09:05:42.305023488Z","modified_time":"2023-08-14T08:40:40.515973651Z","sha256":"10dbf649c9f977defdb670b0f617759be6d81a7c8b152ed0c12706a6c81e564d"},{"sha256":"6592dfe8d7b6a5c8e1ffcd328000b371dce64ba230547f8f34478c527285f2c7","source":"ossf-package-analysis","versions":["9.9.9"],"import_time":"2023-08-14T09:34:41.926333526Z","modified_time":"2023-08-14T09:15:00.557234643Z"},{"sha256":"4e0c11328bba9ebf6da62d82fc149892918b5830eef9816b5f887c46f1108fa0","source":"ossf-package-analysis","versions":["10.0.3"],"import_time":"2023-08-14T11:04:53.168218695Z","modified_time":"2023-08-14T10:45:38.70369614Z"}]},"affected":[{"package":{"name":"marvelmaniac-reddit-rce","ecosystem":"npm","purl":"pkg:npm/marvelmaniac-reddit-rce"},"versions":["1.1.1","9.9.9","10.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/marvelmaniac-reddit-rce/MAL-2023-1453.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}