{"id":"MAL-2024-1328","summary":"Malicious code in discord.js-hex (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (015a5d02bee306302c82f2de4541e008c6ebcc61804819bf894aac181a1c9eac)\nThe OpenSSF Package Analysis project identified 'discord.js-hex' @ 1.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-05-06T02:38:12Z","published":"2024-04-30T22:00:28Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-05-06T02:37:55.582665075Z","modified_time":"2024-05-01T17:46:00Z","sha256":"015a5d02bee306302c82f2de4541e008c6ebcc61804819bf894aac181a1c9eac","source":"ossf-package-analysis","versions":["1.0.1"]},{"import_time":"2024-05-06T02:37:55.672194743Z","modified_time":"2024-05-01T17:56:11Z","sha256":"7468760538769377de71ab4e5d14a37338cf2f05b777ecb9925f3faba0f3046f","source":"ossf-package-analysis","versions":["1.0.2"]},{"import_time":"2024-05-06T02:37:55.396480662Z","modified_time":"2024-04-30T22:00:28Z","sha256":"df4bfc938fd66dcf8f877e7c31468fb933e46c9241e213f749bc534230019091","source":"ossf-package-analysis","versions":["1.0.0"]}]},"affected":[{"package":{"name":"discord.js-hex","ecosystem":"npm","purl":"pkg:npm/discord.js-hex"},"versions":["1.0.1","1.0.2","1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/discord.js-hex/MAL-2024-1328.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}