{"id":"MAL-2023-1491","summary":"Malicious code in f0-data-constructor (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (203b615a64203063f94994f1dbe5118a11c9543bfc3f4d47322f54aabb61f814)\nThe OpenSSF Package Analysis project identified 'f0-data-constructor' @ 28.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2026-07-25T09:52:35.947049541Z","published":"2023-08-19T17:23:08Z","database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"9133720bff10d051149c2acb0dcab98768e9badae42fe211352aa258afd49c28","import_time":"2023-08-19T17:34:10.700146611Z","modified_time":"2023-08-19T17:23:08.841551693Z","versions":["1.0.0"]},{"source":"ossf-package-analysis","sha256":"203b615a64203063f94994f1dbe5118a11c9543bfc3f4d47322f54aabb61f814","import_time":"2026-07-25T09:38:34.100793216Z","modified_time":"2026-07-25T09:24:33Z","versions":["28.0.0"]}]},"affected":[{"package":{"name":"f0-data-constructor","ecosystem":"npm","purl":"pkg:npm/f0-data-constructor"},"versions":["1.0.0","28.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/f0-data-constructor/MAL-2023-1491.json"}}],"schema_version":"1.7.5","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}