{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "discord.js-commandsv14"
      },
      "versions": [
        "1.0.4",
        "1.0.3",
        "1.0.2",
        "1.0.8"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "https://github.com/ossf/package-analysis",
        "https://openssf.slack.com/channels/package_analysis"
      ],
      "name": "OpenSSF: Package Analysis",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "import_time": "2024-02-07T02:33:14.581855449Z",
        "modified_time": "2024-02-04T20:30:45Z",
        "sha256": "0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665",
        "source": "ossf-package-analysis",
        "versions": [
          "1.0.4"
        ]
      },
      {
        "import_time": "2024-02-07T02:33:14.47666505Z",
        "modified_time": "2024-02-04T15:34:02Z",
        "sha256": "3fcc7a2e81c50b80163504dde7ac11e30bbcbdb4e8e64e14dc58e52d5204b7f6",
        "source": "ossf-package-analysis",
        "versions": [
          "1.0.3"
        ]
      },
      {
        "import_time": "2024-02-07T02:33:14.273385555Z",
        "modified_time": "2024-02-03T15:13:19Z",
        "sha256": "c3885ed87e2208ac8694e7894e622351c5345712bb9e635326d9ce884e396be4",
        "source": "ossf-package-analysis",
        "versions": [
          "1.0.2"
        ]
      },
      {
        "import_time": "2024-02-21T04:33:36.367188309Z",
        "modified_time": "2024-02-18T16:47:26Z",
        "sha256": "5be252796130bc99482cbc76c99031fbbba6156c303727f39d8c57c93b87ff5c",
        "source": "ossf-package-analysis",
        "versions": [
          "1.0.8"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665)\nThe OpenSSF Package Analysis project identified \u0027discord.js-commandsv14\u0027 @ 1.0.4 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n",
  "id": "MAL-2024-970",
  "modified": "2024-02-21T04:33:54Z",
  "published": "2024-02-03T15:13:19Z",
  "schema_version": "1.5.0",
  "summary": "Malicious code in discord.js-commandsv14 (npm)"
}