{"id":"MAL-2023-1217","summary":"Malicious code in javascript-appfabric-logger (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (9f8b7cd0cdd29ede135536b1e9ca802d8bfd2343e149fb7fd4ff7de38a4d1813)\nThe OpenSSF Package Analysis project identified 'javascript-appfabric-logger' @ 966.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-08-10T06:17:48Z","published":"2023-06-03T11:30:49Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:17:19.975866431Z","modified_time":"2023-06-03T11:41:13.688027356Z","sha256":"9f8b7cd0cdd29ede135536b1e9ca802d8bfd2343e149fb7fd4ff7de38a4d1813","source":"ossf-package-analysis","versions":["966.0.0"]},{"versions":["966.0.1"],"import_time":"2023-08-10T06:17:19.766296176Z","modified_time":"2023-06-03T11:30:49.227481907Z","sha256":"af1aa339fb09a23bd04917b26eb73ebc4594156d6be4e2b37ff1d5540e2065a3","source":"ossf-package-analysis"},{"sha256":"fa8545ab46a24f1bb2c51eddd7765c0da51d8b146b589f0f525827e510558f90","source":"ossf-package-analysis","versions":["966.0.3"],"import_time":"2023-08-10T06:17:20.257280839Z","modified_time":"2023-06-03T11:41:20.861217463Z"}]},"affected":[{"package":{"name":"javascript-appfabric-logger","ecosystem":"npm","purl":"pkg:npm/javascript-appfabric-logger"},"versions":["966.0.0","966.0.1","966.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/javascript-appfabric-logger/MAL-2023-1217.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}