{"id":"MAL-2025-4973","summary":"Malicious code in juno-autodiscovery-browser (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99)\nThe OpenSSF Package Analysis project identified 'juno-autodiscovery-browser' @ 9999.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2025-06-18T01:11:33Z","published":"2025-06-15T16:44:23Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-06-15T17:04:44.287563296Z","modified_time":"2025-06-15T16:55:10Z","sha256":"41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99","source":"ossf-package-analysis","versions":["9999.0.1"]},{"versions":["9999.0.0"],"import_time":"2025-06-15T17:04:44.051834144Z","modified_time":"2025-06-15T16:44:23Z","sha256":"ea8716d67ab06d7fd61274dca71da0d75f06571f3ee6c27a6b3f8edd678c76bd","source":"ossf-package-analysis"},{"import_time":"2025-06-15T20:05:39.015987497Z","modified_time":"2025-06-15T19:51:29Z","sha256":"2040894528b1dc6b666ea94310d1aafc09e5c34a7609fcddd0a2ade090c5a947","source":"ossf-package-analysis","versions":["9999.0.2"]},{"modified_time":"2025-06-15T20:37:23Z","sha256":"add1dcc99fee292aebe94493e4dd20bc9b268cd674ae181bf0009ea974a8c164","source":"ossf-package-analysis","versions":["9999.0.3"],"import_time":"2025-06-15T21:04:47.27030366Z"}]},"affected":[{"package":{"name":"juno-autodiscovery-browser","ecosystem":"npm","purl":"pkg:npm/juno-autodiscovery-browser"},"ranges":[{"type":"SEMVER","events":[{"introduced":"9999.0.0"}]}],"versions":["9999.0.1","9999.0.0","9999.0.2","9999.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/juno-autodiscovery-browser/MAL-2025-4973.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}