{"id":"MAL-2023-1114","summary":"Malicious code in apache2 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (12b1a6eed914c86f199b052822217042e2afa047d6b1d9921fd30b56f1e5e650)\nThe OpenSSF Package Analysis project identified 'apache2' @ 1.1.9 (npm) as malicious.\n\nIt is considered malicious because:\n- The package communicates with a domain associated with malicious activity.\n","aliases":["SNYK-JS-APACHE2-3336064"],"modified":"2024-06-28T03:14:29.673091Z","published":"2023-04-29T16:39:14Z","database_specific":{"malicious-packages-origins":[{"sha256":"12b1a6eed914c86f199b052822217042e2afa047d6b1d9921fd30b56f1e5e650","source":"ossf-package-analysis","versions":["1.1.9"],"import_time":"2023-08-10T06:15:23.325307385Z","modified_time":"2023-04-29T16:39:14.067137742Z"},{"id":"RLMA-2024-00348","import_time":"2024-06-28T02:41:54.774931425Z","modified_time":"2024-06-25T12:28:05Z","sha256":"debfea99fdbe201b16c31aed1bcdb9e5aa3b8c6edcd8f11f0587fab836b7a863","source":"reversing-labs","versions":["1.1.9"]}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-APACHE2-3336064"}],"affected":[{"package":{"name":"apache2","ecosystem":"npm","purl":"pkg:npm/apache2"},"versions":["1.1.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/apache2/MAL-2023-1114.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}