{"id":"MAL-2023-8159","summary":"Malicious code in goingwithflow (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (820652459a96bb4b499ab8430bae2e52c0da5f864e093be1047269c2cb98de91)\nThe OpenSSF Package Analysis project identified 'goingwithflow' @ 9.8.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-09-19T07:06:04Z","published":"2023-09-19T06:25:50Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-09-19T06:34:53.661165451Z","modified_time":"2023-09-19T06:30:24Z","sha256":"1adc64cd0b4d6b90e68777c0fd82941996b26a451f6af3c8641dfb03b626223d","source":"ossf-package-analysis","versions":["2.9.9"]},{"import_time":"2023-09-19T06:34:53.581019185Z","modified_time":"2023-09-19T06:25:50Z","sha256":"c7521addafa9a5e171db323e67763d73a84980ad50fe1e47f95f52bf3649de3b","source":"ossf-package-analysis","versions":["4.9.9"]},{"source":"ossf-package-analysis","versions":["9.8.9"],"import_time":"2023-09-19T07:05:43.234570469Z","modified_time":"2023-09-19T06:37:53Z","sha256":"820652459a96bb4b499ab8430bae2e52c0da5f864e093be1047269c2cb98de91"},{"import_time":"2023-09-19T07:05:43.288429144Z","modified_time":"2023-09-19T06:50:39Z","sha256":"b869dda653a5d395abe8388e6cc1c70e4ebecab078c3be7f455c8f89582ae8aa","source":"ossf-package-analysis","versions":["6.9.9"]}]},"affected":[{"package":{"name":"goingwithflow","ecosystem":"npm","purl":"pkg:npm/goingwithflow"},"versions":["2.9.9","4.9.9","9.8.9","6.9.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/goingwithflow/MAL-2023-8159.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}