{"id":"MAL-2025-48357","summary":"Malicious code in checkout-ui-extensions-react (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2025-10-27T18:09:48Z","published":"2025-10-04T01:42:59Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","versions":["12.0.9","13.0.9"],"id":"RLMA-2025-05295","import_time":"2025-10-27T18:08:53.326871433Z","modified_time":"2025-10-23T19:27:43Z","sha256":"7565100533a1b3c8cd49c62df895f7b5a5c11c84e3c6f4616b5020f5637f7282"}]},"affected":[{"package":{"name":"checkout-ui-extensions-react","ecosystem":"npm","purl":"pkg:npm/checkout-ui-extensions-react"},"ranges":[{"type":"SEMVER","events":[{"introduced":"12.0.9"}]}],"versions":["12.0.9","13.0.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/checkout-ui-extensions-react/MAL-2025-48357.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}