{"id":"MAL-2023-6","summary":"Malicious code in parallel-workers (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (abf4ac32d4bbbf2bca51efed2166f670c707230f7da2b87c1318cbe8ca9dade1)\nThe OpenSSF Package Analysis project identified 'parallel-workers' @ 99.99.101 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n- The package executes one or more commands associated with malicious behavior.\n","aliases":["SNYK-JS-PARALLELWORKERS-3358943"],"modified":"2024-06-28T03:14:37.886944Z","published":"2023-04-27T06:36:28Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-06-30T03:52:49.169017309Z","source":"ossf-package-analysis","sha256":"9c0174e309ee35f18e3e4ecc04144c7841778774a8c0c0cb0b021b36d33dfb20","modified_time":"0001-01-01T00:00:00Z","versions":["99.99.99"]},{"import_time":"2023-06-30T03:52:49.461728523Z","source":"ossf-package-analysis","sha256":"abf4ac32d4bbbf2bca51efed2166f670c707230f7da2b87c1318cbe8ca9dade1","modified_time":"0001-01-01T00:00:00Z","versions":["99.99.101"]},{"source":"reversing-labs","import_time":"2024-06-28T02:44:21.46425693Z","id":"RLMA-2024-01554","sha256":"50f20e0797ba51c8bd6fdd76af531e4eb24b29707d68640f25fc9caec492e986","modified_time":"2024-06-25T12:55:11Z","versions":["99.99.100","99.99.99","99.99.98","99.99.101","99.99.104"]}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-PARALLELWORKERS-3358943"}],"affected":[{"package":{"name":"parallel-workers","ecosystem":"npm","purl":"pkg:npm/parallel-workers"},"versions":["99.99.99","99.99.101","99.99.100","99.99.98","99.99.104"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/parallel-workers/MAL-2023-6.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}