{"id":"MAL-2026-10879","summary":"Malicious code in @dxcl/user-js (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-vwf5-f55j-6283"],"modified":"2026-09-01T11:30:41.994019152Z","published":"2026-07-20T10:19:40Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-05420","import_time":"2026-07-20T13:14:40.156922614Z","modified_time":"2026-07-20T10:19:40Z","sha256":"c5a4fbba418f53913d8bd197bd4f44a7a4b3887e561e9c4f279cea3833762783","source":"reversing-labs","versions":["99.99.99"]},{"id":"RLUA-2026-05857","import_time":"2026-09-01T11:17:41.408610076Z","modified_time":"2026-08-24T16:22:12Z","sha256":"b3ceb33273b9c60466bc6fb6b4246ef50fd9cefe715c2b0f4586606eed1f550a","source":"reversing-labs"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vwf5-f55j-6283"}],"affected":[{"package":{"name":"@dxcl/user-js","ecosystem":"npm","purl":"pkg:npm/%40dxcl/user-js"},"versions":["99.99.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@dxcl/user-js/MAL-2026-10879.json"}}],"schema_version":"1.9.0","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}