{"id":"MAL-2024-1052","summary":"Malicious code in relativity-web-component (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ceec81f16c03da2474b6b582560b0fc3bd20fa136bb49dadead29fc397209f70)\nThe OpenSSF Package Analysis project identified 'relativity-web-component' @ 2.999.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-03-04T14:34:48Z","published":"2024-03-03T10:14:21Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-03-03T10:14:21Z","sha256":"5905ea334f8d812731feb1111d0c34783cb78a5fb8e489521d8a8abdbb021607","source":"ossf-package-analysis","versions":["1.999.0"],"import_time":"2024-03-04T05:49:10.003044906Z"},{"versions":["2.999.0"],"import_time":"2024-03-04T11:12:06.304296641Z","modified_time":"2024-03-04T10:31:02Z","sha256":"ceec81f16c03da2474b6b582560b0fc3bd20fa136bb49dadead29fc397209f70","source":"ossf-package-analysis"},{"import_time":"2024-03-04T14:34:27.152140904Z","modified_time":"2024-03-04T14:15:44Z","sha256":"3fa2eb11f6f09c798a4613d72ff6482ac8b52da802e6bf5a8b60dc2a57f9d7f8","source":"ossf-package-analysis","versions":["5.78.99"]}]},"affected":[{"package":{"name":"relativity-web-component","ecosystem":"npm","purl":"pkg:npm/relativity-web-component"},"versions":["1.999.0","2.999.0","5.78.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/relativity-web-component/MAL-2024-1052.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}