{
   affected: [
      {
         package: {
            ecosystem: "PyPI",
            name: "reqargs",
         },
         versions: [
            "1.4",
            "1.2",
            "1.3",
         ],
      },
   ],
   credits: [
      {
         contact: [
            "https://github.com/ossf/package-analysis",
            "https://openssf.slack.com/channels/package_analysis",
         ],
         name: "OpenSSF: Package Analysis",
         type: "FINDER",
      },
   ],
   database_specific: {
      "malicious-packages-origins": [
         {
            import_time: "2024-04-12T03:34:12.241808019Z",
            modified_time: "2024-04-11T12:58:37Z",
            sha256: "9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878",
            source: "ossf-package-analysis",
            versions: [
               "1.4",
            ],
         },
         {
            import_time: "2024-04-12T03:34:12.047119116Z",
            modified_time: "2024-04-11T07:56:53Z",
            sha256: "e0f9f9aaa83201345dd70d47a4e9a773ddacc69fedccf38ab7ddb4ab192efb45",
            source: "ossf-package-analysis",
            versions: [
               "1.2",
            ],
         },
         {
            import_time: "2024-04-12T03:34:12.143025384Z",
            modified_time: "2024-04-11T10:11:36Z",
            sha256: "ed249f273ab247bc45f55be79280915985c5f8db08317e21a8bd92571bf5f7b4",
            source: "ossf-package-analysis",
            versions: [
               "1.3",
            ],
         },
      ],
   },
   details: "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878)\nThe OpenSSF Package Analysis project identified 'reqargs' @ 1.4 (pypi) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n",
   id: "MAL-2024-1254",
   modified: "2024-04-12T03:34:32Z",
   published: "2024-04-11T07:56:53Z",
   schema_version: "1.5.0",
   summary: "Malicious code in reqargs (PyPI)",
}