{"id":"MAL-2025-49104","summary":"Malicious code in @item-shop-data/client (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f3931756a8f0da8b385e1c2b974c51fef803ddf8c0c6cb84ed0dacf3b3e6c1bd)\nThe package @item-shop-data/client was found to contain malicious code.\n","modified":"2026-06-10T05:31:26.653006364Z","published":"2025-10-30T17:38:57Z","database_specific":{"malicious-packages-origins":[{"sha256":"f3931756a8f0da8b385e1c2b974c51fef803ddf8c0c6cb84ed0dacf3b3e6c1bd","source":"amazon-inspector","import_time":"2025-10-30T18:08:39.388740359Z","modified_time":"2025-10-30T17:38:57Z","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]}]},"affected":[{"package":{"name":"@item-shop-data/client","ecosystem":"npm","purl":"pkg:npm/%40item-shop-data%2Fclient"},"versions":["0.0.1-security","59.0.90","58.90.90","58.0.90","58.0.1","56.0.10","56.0.3","56.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@item-shop-data/client/MAL-2025-49104.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"}]}