{"id":"MAL-2023-8743","summary":"Malicious code in finalact (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (65ae4f51ac0f42175a709c00e1fa248d12861a7d64bd828cfce2ab35f6a6c106)\nThe OpenSSF Package Analysis project identified 'finalact' @ 1.1.3 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2023-12-27T11:34:02Z","published":"2023-12-26T06:27:32Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-12-26T06:34:12.981743255Z","modified_time":"2023-12-26T06:27:32Z","sha256":"65ae4f51ac0f42175a709c00e1fa248d12861a7d64bd828cfce2ab35f6a6c106","source":"ossf-package-analysis","versions":["1.1.3"]},{"sha256":"aa20f95caf4b5da50bb0d6995106308363abceb93f9ab08c2b352c5dbea05733","source":"ossf-package-analysis","versions":["1.1.5"],"import_time":"2023-12-26T07:04:46.032836323Z","modified_time":"2023-12-26T07:01:08Z"},{"source":"ossf-package-analysis","versions":["1.1.4"],"import_time":"2023-12-26T07:04:45.791662107Z","modified_time":"2023-12-26T06:37:24Z","sha256":"bb2c589cc0d81b1d339e177c6d46f83ba5da1c9e887a0accaf3037bf7abadc26"},{"sha256":"01cff5388d955299d884e467b3d98c1bbce0770ea21b7b47826d2bd0e20b639d","source":"ossf-package-analysis","versions":["1.1.6"],"import_time":"2023-12-26T08:05:29.167201945Z","modified_time":"2023-12-26T07:39:42Z"},{"import_time":"2023-12-27T06:05:28.424793389Z","modified_time":"2023-12-27T05:36:36Z","sha256":"be5c6bfcda7631ddacdc746d91a26140c1d57106edf9b536c4aed7b6ef05d1ab","source":"ossf-package-analysis","versions":["1.1.9"]},{"import_time":"2023-12-27T11:33:40.67763571Z","modified_time":"2023-12-27T11:30:36Z","sha256":"db4c10e1ecbfe28ce71f1591a5bfbaef836f09257fc0b7589dcea64cfe163076","source":"ossf-package-analysis","versions":["1.2.1"]}]},"affected":[{"package":{"name":"finalact","ecosystem":"npm","purl":"pkg:npm/finalact"},"versions":["1.1.3","1.1.5","1.1.4","1.1.6","1.1.9","1.2.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/finalact/MAL-2023-8743.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}