{"id":"MAL-2025-42131","summary":"Malicious code in pp-react-segmented-controller (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (3aa7d1e64be7773bd65b53e4d68407a98eb87811a768245a3cb7d1dd1980516d)\nThe OpenSSF Package Analysis project identified 'pp-react-segmented-controller' @ 99.0.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-09-26T11:06:45Z","published":"2025-08-27T16:29:03Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-09-01T09:07:32.741496839Z","modified_time":"2025-08-27T16:29:03Z","sha256":"3aa7d1e64be7773bd65b53e4d68407a98eb87811a768245a3cb7d1dd1980516d","source":"ossf-package-analysis","versions":["99.0.2"]},{"id":"RLMA-2025-05127","import_time":"2025-09-26T11:06:01.789557795Z","modified_time":"2025-09-26T09:40:02Z","sha256":"c76a813d96b6a381309fd21e82caec3fb9a8ea059a2a18885c6d5f0e2b5fe2b6","source":"reversing-labs","versions":["99.0.0","99.0.2","99.0.3"]}]},"affected":[{"package":{"name":"pp-react-segmented-controller","ecosystem":"npm","purl":"pkg:npm/pp-react-segmented-controller"},"versions":["99.0.2","99.0.0","99.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/pp-react-segmented-controller/MAL-2025-42131.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}