{"id":"MAL-2024-10547","summary":"Malicious code in @vkplay/shared (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (8fae653de9f00dc321cbd5b08a89f89b71c2dd6fc14dc214b2eaeb5cbf298c35)\nThe OpenSSF Package Analysis project identified '@vkplay/shared' @ 10.10.15 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-12-09T14:39:21Z","published":"2024-11-10T12:51:43Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-11-10T13:07:15.913588823Z","modified_time":"2024-11-10T12:51:43Z","sha256":"8fae653de9f00dc321cbd5b08a89f89b71c2dd6fc14dc214b2eaeb5cbf298c35","source":"ossf-package-analysis","versions":["10.10.15"]},{"modified_time":"2024-11-10T13:15:25Z","sha256":"31d35ece6405b57d071a494c563be865d9c7c4f53b105e27fd7bae02fdd5e26f","source":"ossf-package-analysis","versions":["10.10.15"],"import_time":"2024-11-10T13:33:59.413814823Z"},{"import_time":"2024-11-10T13:33:59.544136464Z","modified_time":"2024-11-10T13:27:31Z","sha256":"4475dbf8ba842c48b229ce7d5afac792ae22990f2144ae9f2a8868ba6bbd621d","source":"ossf-package-analysis","versions":["10.10.15"]},{"id":"RLMA-2024-10410","import_time":"2024-12-09T14:38:13.747707686Z","modified_time":"2024-12-08T21:59:49Z","sha256":"a8edafc5133a136760ec59ee577c2f56dfe8e77142a57f6ad247e3fb4880497e","source":"reversing-labs","versions":["10.10.11","10.10.12","10.10.13","10.10.15"]}]},"affected":[{"package":{"name":"@vkplay/shared","ecosystem":"npm","purl":"pkg:npm/%40vkplay/shared"},"versions":["10.10.15","10.10.11","10.10.12","10.10.13"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@vkplay/shared/MAL-2024-10547.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}