{"id":"MAL-2025-48555","summary":"Malicious code in user_oidc (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e28e6e5435f54199a3dca6186e1ad2d2846226bcf0a6792ff09d40b6215ed7af)\nThe OpenSSF Package Analysis project identified 'user_oidc' @ 8.0.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","aliases":["GHSA-xc3q-j43c-38v2"],"modified":"2025-10-24T02:12:43.584259Z","published":"2025-10-22T02:13:41Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-10-22T23:05:36.182329804Z","modified_time":"2025-10-22T22:40:50Z","sha256":"e28e6e5435f54199a3dca6186e1ad2d2846226bcf0a6792ff09d40b6215ed7af","source":"ossf-package-analysis","versions":["8.0.2"]},{"source":"ossf-package-analysis","versions":["8.0.3"],"import_time":"2025-10-23T15:06:43.7752139Z","modified_time":"2025-10-23T14:43:46Z","sha256":"c735f97412c53181c344dda45b28cfe8f99d2125683693c3d097dc15722f76b3"},{"import_time":"2025-10-24T01:52:31.545667029Z","modified_time":"2025-10-24T01:36:04Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"ab3ebb3b9bc178d18b199897b5d5d0492737f9ce310613487f3bd3e1278b086e","source":"ghsa-malware","id":"GHSA-xc3q-j43c-38v2"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-xc3q-j43c-38v2"}],"affected":[{"package":{"name":"user_oidc","ecosystem":"npm","purl":"pkg:npm/user_oidc"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["8.0.2","8.0.3"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/user_oidc/MAL-2025-48555.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}