{"id":"MAL-2023-8731","summary":"Malicious code in @unilin/dlw.scbase.staticsite (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (79abbb721270b1006f42d07a2af44116ea33ce6faf62ec8325f4a48cdcdf0ef0)\nThe OpenSSF Package Analysis project identified '@unilin/dlw.scbase.staticsite' @ 9999.10.11 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-12-21T03:34:18Z","published":"2023-12-20T00:11:19Z","database_specific":{"malicious-packages-origins":[{"sha256":"79abbb721270b1006f42d07a2af44116ea33ce6faf62ec8325f4a48cdcdf0ef0","source":"ossf-package-analysis","versions":["9999.10.11"],"import_time":"2023-12-21T03:33:54.66711771Z","modified_time":"2023-12-20T00:35:49Z"},{"sha256":"b09b712d1f202967dfb4282d7fc5bf1bf968c4614326269ac503a69f50ab5ea7","source":"ossf-package-analysis","versions":["9999.10.10"],"import_time":"2023-12-21T03:33:54.425500202Z","modified_time":"2023-12-20T00:19:59Z"},{"modified_time":"2023-12-20T00:11:19Z","sha256":"baab3770f06160cc27c4d74d197f50310587a36b60b5dcb55adb46b30757c8e7","source":"ossf-package-analysis","versions":["9999.10.9"],"import_time":"2023-12-21T03:33:54.177916223Z"}]},"affected":[{"package":{"name":"@unilin/dlw.scbase.staticsite","ecosystem":"npm","purl":"pkg:npm/%40unilin/dlw.scbase.staticsite"},"versions":["9999.10.11","9999.10.10","9999.10.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@unilin/dlw.scbase.staticsite/MAL-2023-8731.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}