proton-account

{"schema_version":"1.7.4","id":"MAL-2023-1273","published":"2023-05-02T06:41:45Z","modified":"2026-09-01T11:20:29.229373663Z","aliases":["SNYK-JS-PROTONACCOUNT-3326385","GHSA-qfj4-8q57-wpmh"],"summary":"Malicious code in proton-account (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (edfb8318aed91ce8eb51e269ae47766d501e4e03c1b95f4327570493b4b1379c)\nThe OpenSSF Package Analysis project identified 'proton-account' @ 99.99.999 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"name":"proton-account","ecosystem":"npm"},"versions":["99.99.999","99.99.99","99.99.9999"]}],"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-PROTONACCOUNT-3326385"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qfj4-8q57-wpmh"}],"database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:15:31.2763651Z","modified_time":"2023-05-02T06:41:45.818958635Z","sha256":"edfb8318aed91ce8eb51e269ae47766d501e4e03c1b95f4327570493b4b1379c","source":"ossf-package-analysis","versions":["99.99.999"]},{"id":"RLMA-2026-05235","import_time":"2026-07-09T09:16:44.009482818Z","modified_time":"2026-07-07T13:05:21Z","sha256":"a3906f02579ee568a2dcd6f465246219fcae1864ff7fa0ad33cd80f1e0a74c4f","source":"reversing-labs","versions":["99.99.99","99.99.999","99.99.9999"]},{"id":"RLUA-2026-06397","import_time":"2026-09-01T11:18:17.732650662Z","modified_time":"2026-08-24T17:05:26Z","sha256":"5b75d5e9e3c2ba75580ad32115cc4830dcd731041baffc5e47349d0db20c4adb","source":"reversing-labs"}]},"credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}