{"id":"MAL-2025-4972","summary":"Malicious code in @glofe/company (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (1c5480bb5f834f28a3384d3dffa6cc27aa4b9b774a690fb81004ca419c69e0db)\nThe OpenSSF Package Analysis project identified '@glofe/company' @ 9999.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2025-06-18T01:11:33Z","published":"2025-06-15T16:40:46Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2025-06-15T16:55:11Z","sha256":"1c5480bb5f834f28a3384d3dffa6cc27aa4b9b774a690fb81004ca419c69e0db","source":"ossf-package-analysis","versions":["9999.0.1"],"import_time":"2025-06-15T17:04:44.371395429Z"},{"import_time":"2025-06-15T17:04:43.968824982Z","modified_time":"2025-06-15T16:40:46Z","sha256":"5329252005d6ee0c5b30088038d5f262a5605b7ed2fe897499526dbc7b2beef4","source":"ossf-package-analysis","versions":["9999.0.0"]},{"sha256":"43e580de4eda680c86be038d49287a8914dd803e45f45d02f12dfc4d679c6259","source":"ossf-package-analysis","versions":["9999.0.2"],"import_time":"2025-06-15T18:06:39.812070193Z","modified_time":"2025-06-15T17:50:47Z"},{"versions":["9999.0.4"],"import_time":"2025-06-15T21:04:47.405849089Z","modified_time":"2025-06-15T20:37:28Z","sha256":"fbd841de509dd452de03efffae2642d3f768edf10cb25f65bc05f94dc25d1521","source":"ossf-package-analysis"}]},"affected":[{"package":{"name":"@glofe/company","ecosystem":"npm","purl":"pkg:npm/%40glofe/company"},"ranges":[{"type":"SEMVER","events":[{"introduced":"9999.0.0"}]}],"versions":["9999.0.1","9999.0.0","9999.0.2","9999.0.4"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@glofe/company/MAL-2025-4972.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}