{"id":"MAL-2025-47873","summary":"Malicious code in node-converter (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: google-open-source-security (f1d0f1e58621f901f465807f834a6aa7b8af91e5626694d0a9e08586b9c2e010)\nThis package is malicious and executes arbitrary code from an attacker\ncontrolled domain.\n","modified":"2025-10-02T05:18:22Z","published":"2025-10-02T05:18:22Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-10-02T05:19:24.603474Z","modified_time":"2025-10-02T05:18:22Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"f1d0f1e58621f901f465807f834a6aa7b8af91e5626694d0a9e08586b9c2e010","source":"google-open-source-security"}]},"affected":[{"package":{"name":"node-converter","ecosystem":"npm","purl":"pkg:npm/node-converter"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/node-converter/MAL-2025-47873.json"}}],"schema_version":"1.7.3"}