{"id":"MAL-2023-8469","summary":"Malicious code in react-18-viem (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ab3496e80f456724e73563a2fef64ff6928d569e6e730832dd7de084aa0b3655)\nThe OpenSSF Package Analysis project identified 'react-18-viem' @ 0.1.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2023-11-07T07:30:28Z","published":"2023-11-07T07:30:28Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-11-07T07:33:42.014092591Z","modified_time":"2023-11-07T07:30:28Z","sha256":"ab3496e80f456724e73563a2fef64ff6928d569e6e730832dd7de084aa0b3655","source":"ossf-package-analysis","versions":["0.1.1"]}]},"affected":[{"package":{"name":"react-18-viem","ecosystem":"npm","purl":"pkg:npm/react-18-viem"},"versions":["0.1.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/react-18-viem/MAL-2023-8469.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}