{"action":"No fix published. Pin and monitor.","affected":[],"component":"dictum.js","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j5jc-jf8f-86q7","id":"tcs_01M5KFX262AYJ2E2HJ54PCF5QG","modified_at":"2023-07-27T20:34:44Z","published_at":"2020-09-01T20:38:30Z","references":["https://osv.dev/vulnerability/GHSA-j5jc-jf8f-86q7","https://www.npmjs.com/advisories/640"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-j5jc-jf8f-86q7","url":"https://osv.dev/vulnerability/GHSA-j5jc-jf8f-86q7"}],"summary":"Malicious Package in dictum.js"}