{"id":"MAL-2024-43","summary":"Malicious code in noblox.js-servers (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (be4b415c87e9f3008a2d199fcc914e49a3a8a047e4bdfcaa493a9364d54accf7)\nThe OpenSSF Package Analysis project identified 'noblox.js-servers' @ 4.15.8 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-01-07T03:34:12Z","published":"2024-01-07T01:50:07Z","database_specific":{"malicious-packages-origins":[{"versions":["4.15.8"],"import_time":"2024-01-07T02:17:14.882007503Z","modified_time":"2024-01-07T01:51:04Z","sha256":"be4b415c87e9f3008a2d199fcc914e49a3a8a047e4bdfcaa493a9364d54accf7","source":"ossf-package-analysis"},{"import_time":"2024-01-07T02:17:14.769189579Z","modified_time":"2024-01-07T01:50:07Z","sha256":"f48d7814e2fc62e16b780d75b185f49b846fc9a6a063fac8eda4cd228e1ba407","source":"ossf-package-analysis","versions":["4.15.7"]},{"sha256":"555fe97514c17ef3201d2710c8fc66643b03cd64601c3286e11eaa017a0cc2d5","source":"ossf-package-analysis","versions":["4.16.2"],"import_time":"2024-01-07T03:05:13.397304203Z","modified_time":"2024-01-07T02:51:19Z"},{"import_time":"2024-01-07T03:33:55.621973024Z","modified_time":"2024-01-07T03:10:53Z","sha256":"3018ef5932a0c25bd2ec9aa051e3bb913b4cd4c8ec69d737759c50fa19e655da","source":"ossf-package-analysis","versions":["4.16.3"]}]},"affected":[{"package":{"name":"noblox.js-servers","ecosystem":"npm","purl":"pkg:npm/noblox.js-servers"},"versions":["4.15.8","4.15.7","4.16.2","4.16.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/noblox.js-servers/MAL-2024-43.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}