{"id":"MAL-2025-192700","summary":"Malicious code in @ads-core/types (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c87d0a891128398685bb290e3aeec3ffa92b924ed73e196f11216f332a5ba071)\nThe package @ads-core/types was found to contain malicious code.\n","aliases":["GHSA-6xvr-cfwp-7mv9"],"modified":"2026-09-01T11:30:30.248698818Z","published":"2025-12-23T07:43:33Z","database_specific":{"malicious-packages-origins":[{"versions":["11.7.7","11.7.9"],"id":"RLMA-2025-06011","import_time":"2025-12-23T15:07:37.433093144Z","modified_time":"2025-12-23T07:43:33Z","sha256":"96078bcc362c63f4dba58ba57dfb9590121588112c9b4fec26d87f585b17e3a8","source":"reversing-labs"},{"import_time":"2025-12-24T00:51:37.614220341Z","modified_time":"2025-12-24T00:41:11Z","sha256":"c87d0a891128398685bb290e3aeec3ffa92b924ed73e196f11216f332a5ba071","source":"amazon-inspector","versions":["11.7.7","11.7.9"]},{"id":"RLUA-2026-05793","import_time":"2026-09-01T11:17:37.167777804Z","modified_time":"2026-08-24T16:17:27Z","sha256":"84487ef4fbfce2e6119acd3e36e56ee99e06663b95fe4babab643800165f4c0d","source":"reversing-labs"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6xvr-cfwp-7mv9"}],"affected":[{"package":{"name":"@ads-core/types","ecosystem":"npm","purl":"pkg:npm/%40ads-core/types"},"versions":["11.7.7","11.7.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ads-core/types/MAL-2025-192700.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}