conversations-embed

{"modified":"2026-05-08T05:46:35Z","published":"2024-12-22T04:50:51Z","schema_version":"1.7.4","id":"MAL-2024-12093","summary":"Malicious code in conversations-embed (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e54647ae689c5f7d3193ceb233f106eac2255d584c793de83b7de77dd086b2dc)\nThe OpenSSF Package Analysis project identified 'conversations-embed' @ 1.21.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"ecosystem":"npm","name":"conversations-embed"},"versions":["1.21.0","99.9.0"]}],"credits":[{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]}],"database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"e54647ae689c5f7d3193ceb233f106eac2255d584c793de83b7de77dd086b2dc","import_time":"2024-12-22T05:05:22.152606047Z","modified_time":"2024-12-22T04:50:51Z","versions":["1.21.0"]},{"source":"ossf-package-analysis","sha256":"cbf63e2aa450b015e38121ef0c984f3938a8d014868a48eeb3678b6276777125","import_time":"2026-05-08T05:44:45.346423017Z","modified_time":"2026-05-07T09:05:43Z","versions":["99.9.0"]}]}}