{"id":"MAL-2025-6932","summary":"Malicious code in gopro-plus-downloader (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae)\nThe OpenSSF Package Analysis project identified 'gopro-plus-downloader' @ 13.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-08-29T06:43:16Z","published":"2025-08-12T22:59:35Z","database_specific":{"malicious-packages-origins":[{"sha256":"0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae","source":"ossf-package-analysis","versions":["13.0.1"],"import_time":"2025-08-18T06:09:45.371347273Z","modified_time":"2025-08-13T21:50:55Z"},{"import_time":"2025-08-18T06:09:44.401487144Z","modified_time":"2025-08-12T22:59:35Z","sha256":"32c94011472f39aa04224a105b64236e40adce69d23f8ad8761903a1addd0fff","source":"ossf-package-analysis","versions":["12.1.0"]},{"versions":["13.0.1"],"id":"RLMA-2025-04547","import_time":"2025-08-29T06:42:23.879464395Z","modified_time":"2025-08-28T07:29:53Z","sha256":"53145f72776ead6323146bcab24fe3de3a655cc5c8f4950dd60b0ece0e14b2b5","source":"reversing-labs"}]},"affected":[{"package":{"name":"gopro-plus-downloader","ecosystem":"npm","purl":"pkg:npm/gopro-plus-downloader"},"ranges":[{"type":"SEMVER","events":[{"introduced":"10.2.6"}]}],"versions":["13.0.1","12.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/gopro-plus-downloader/MAL-2025-6932.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}