@bb1ptest23/test-paket

{"schema_version":"1.7.4","id":"MAL-2026-17201","published":"2026-09-28T01:30:57Z","modified":"2026-09-30T01:38:56.225127106Z","summary":"Malicious code in @bb1ptest23/test-paket (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (88718be23e6bf753453adc1110580e87b675e7881b945d419746afe4bebcfa5e)\nThe package was found to contain malicious code or consuming dependency that contains malicious code\n\n## Source: ossf-package-analysis (b6b02b5a41ef4b1d07f98023a6daa2629818ee31fd68a82af64c9f52f78bec6c)\nThe OpenSSF Package Analysis project identified '@bb1ptest23/test-paket' @ 1.0.3 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"name":"@bb1ptest23/test-paket","ecosystem":"npm"},"versions":["1.0.3"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"check.js","sha256":"9c48ac7f94402623171dcf5f698aef9a3ec943443da48143bd25aab3fd4ea0dc","tlsh":"63d095442c83320411a54be934116007fd0bd9f113a4d140b95c81d55fd55f045f3dec"}],"package_integrity":[{"filename":"test-paket-1.0.3.tgz","hashes":{"sha1":"aeaec4e173d902195e3d52f174e3ddea2ae2732c","sha512_sri":"sha512-j9NsPDZm6/Kvc3nSxqv5DdJt4erRxkCf4oGp6RmbdCJ4T0negJBN/NH27eWdhuE74s9HUmtx81FfbjqME718Cg=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@bb1ptest23/test-paket/v/1.0.3"}],"database_specific":{"malicious-packages-origins":[{"import_time":"2026-09-28T01:38:53.175765878Z","modified_time":"2026-09-28T01:30:57Z","sha256":"b6b02b5a41ef4b1d07f98023a6daa2629818ee31fd68a82af64c9f52f78bec6c","source":"ossf-package-analysis","versions":["1.0.3"]},{"id":"IN-MAL-2026-020778","import_time":"2026-09-30T01:36:50.89260216Z","modified_time":"2026-09-30T01:11:03Z","sha256":"88718be23e6bf753453adc1110580e87b675e7881b945d419746afe4bebcfa5e","source":"amazon-inspector","versions":["1.0.3"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}