{"id":"MAL-2023-1311","summary":"Malicious code in suncorp-styleguide-react-components (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (1b6a39ac171632a984b8ac8c3e53ab935e47753ac7e0df7161daa7bc23f8e08d)\nThe OpenSSF Package Analysis project identified 'suncorp-styleguide-react-components' @ 102.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-08-10T06:17:49Z","published":"2023-05-05T10:57:01Z","database_specific":{"malicious-packages-origins":[{"import_time":"2023-08-10T06:16:58.254796507Z","modified_time":"2023-05-05T14:00:07.363869056Z","sha256":"1b6a39ac171632a984b8ac8c3e53ab935e47753ac7e0df7161daa7bc23f8e08d","source":"ossf-package-analysis","versions":["102.0.0"]},{"modified_time":"2023-05-05T13:58:33.879540608Z","sha256":"3cd1a102fabbfea1ae762ea7098f646097c83ddce67b8ddccaa7a89d017a510e","source":"ossf-package-analysis","versions":["101.0.0"],"import_time":"2023-08-10T06:16:58.017141904Z"},{"import_time":"2023-08-10T06:16:57.760217913Z","modified_time":"2023-05-05T10:57:01.447399415Z","sha256":"731d9bd44bbe5ab8fac6b789fc58aa239cf758f2ff8310cdaf1bff07043c4891","source":"ossf-package-analysis","versions":["91.0.0"]},{"import_time":"2023-08-10T06:16:58.99478929Z","modified_time":"2023-05-05T14:58:12.379920893Z","sha256":"ddb09439b76d8fd35640003997fc5bf574886ceba4ce656d7b08d69dfb3b2199","source":"ossf-package-analysis","versions":["3.1.99"]}]},"affected":[{"package":{"name":"suncorp-styleguide-react-components","ecosystem":"npm","purl":"pkg:npm/suncorp-styleguide-react-components"},"versions":["102.0.0","101.0.0","91.0.0","3.1.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/suncorp-styleguide-react-components/MAL-2023-1311.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}