{"id":"MAL-2023-8513","summary":"Malicious code in ext-frontend-esignature (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (dcffa9ade419d008513b815bd316ec2f2100a8a3510b692cb84a11ca2e5b2ac6)\nThe OpenSSF Package Analysis project identified 'ext-frontend-esignature' @ 2.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2023-11-15T08:06:06Z","published":"2023-11-14T08:41:17Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-11-14T09:05:29.525653131Z","modified_time":"2023-11-14T08:41:17Z","sha256":"dcffa9ade419d008513b815bd316ec2f2100a8a3510b692cb84a11ca2e5b2ac6","source":"ossf-package-analysis","versions":["2.0.1"]},{"import_time":"2023-11-15T08:05:38.382639845Z","modified_time":"2023-11-15T07:36:59Z","sha256":"54ab8a2b26bf7dd01e153c43698c6b95dcde24036ef5f0660530a387dd05ca3a","source":"ossf-package-analysis","versions":["6.0.1"]}]},"affected":[{"package":{"name":"ext-frontend-esignature","ecosystem":"npm","purl":"pkg:npm/ext-frontend-esignature"},"versions":["2.0.1","6.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ext-frontend-esignature/MAL-2023-8513.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}