{"id":"MAL-2023-8302","summary":"Malicious code in @siigo-arquitectura/button-atom (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (10fd520d1b3077c01e859228a807bb4d066d090fa3e1d1b287389a9f45d58a78)\nThe OpenSSF Package Analysis project identified '@siigo-arquitectura/button-atom' @ 5.0.7 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2023-10-06T04:05:49Z","published":"2023-10-06T03:38:19Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2023-10-06T03:58:12Z","sha256":"10fd520d1b3077c01e859228a807bb4d066d090fa3e1d1b287389a9f45d58a78","source":"ossf-package-analysis","versions":["5.0.7"],"import_time":"2023-10-06T04:05:29.257082328Z"},{"import_time":"2023-10-06T04:05:29.127526598Z","modified_time":"2023-10-06T03:50:36Z","sha256":"45987f694328ab5f35ef7f5134471d1194b9432468b9c2d6ba03f43611d5b9fa","source":"ossf-package-analysis","versions":["5.0.5"]},{"import_time":"2023-10-06T04:05:28.89045557Z","modified_time":"2023-10-06T03:38:19Z","sha256":"7f54183f29e4c26dc7b5421b6109cfb2b243d7239e0f541df350e5bce32e79f0","source":"ossf-package-analysis","versions":["5.0.2"]},{"source":"ossf-package-analysis","versions":["5.0.3"],"import_time":"2023-10-06T04:05:29.002800384Z","modified_time":"2023-10-06T03:40:42Z","sha256":"f98f735ee865610780370cded00f51663a69fa2e676aa06c6064f0e2563d1386"}]},"affected":[{"package":{"name":"@siigo-arquitectura/button-atom","ecosystem":"npm","purl":"pkg:npm/%40siigo-arquitectura/button-atom"},"versions":["5.0.7","5.0.5","5.0.2","5.0.3"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@siigo-arquitectura/button-atom/MAL-2023-8302.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}