{"id":"MAL-2025-192817","summary":"Malicious code in jz-native-js-bridge (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5)\nThe package jz-native-js-bridge was found to contain malicious code.\n","modified":"2026-01-02T22:05:29.986107Z","published":"2025-12-23T08:18:18Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-06383","import_time":"2025-12-24T10:07:24.162688713Z","modified_time":"2025-12-23T08:18:18Z","sha256":"ee57d8bcf4e4e447f0b30d39a1fcc672e0e62f94a16fdadc59d1bcc0c37b1e15","source":"reversing-labs","versions":["114.5.14"]},{"source":"amazon-inspector","versions":["114.5.14"],"import_time":"2026-01-02T21:35:50.345962986Z","modified_time":"2026-01-02T21:29:26Z","sha256":"8f5be9f16b75f7bf0ca5477443252a99142fcc146e923a7f77862df124ad6ac5"}]},"affected":[{"package":{"name":"jz-native-js-bridge","ecosystem":"npm","purl":"pkg:npm/jz-native-js-bridge"},"versions":["114.5.14"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jz-native-js-bridge/MAL-2025-192817.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}