{"id":"MAL-2024-10713","summary":"Malicious code in atlas-query-editor (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8)\nThe OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-02-03T18:38:39Z","published":"2024-11-15T02:46:00Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-11-15T02:46:00Z","sha256":"c87ef4ed3d349f5d3658c16f7ce1c2db8b9244b1e53b1cd28fadac8c81d61daa","source":"ossf-package-analysis","versions":["1.1.1"],"import_time":"2024-11-15T02:55:21.028447421Z"},{"id":"RLMA-2024-10449","import_time":"2024-12-09T14:38:17.533655474Z","modified_time":"2024-12-08T22:34:16Z","sha256":"16de8cb74ee7270e048c88e2c5ae5ac13a52aa14a39a18778c53ac14c1aa1596","source":"reversing-labs","versions":["0.0.1","0.1.0","0.1.1","1.0.1","1.1.1"]},{"source":"ossf-package-analysis","versions":["99.99.99"],"import_time":"2024-12-15T23:34:13.924475816Z","modified_time":"2024-12-15T23:24:11Z","sha256":"c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8"},{"id":"RLUA-2025-00077","import_time":"2025-02-03T18:38:11.97391604Z","modified_time":"2025-02-03T16:47:35Z","sha256":"188236f44c2325cc68ad84b2681282818dd3d5e5568eb6c3673ca4dfa93331f9","source":"reversing-labs","versions":["99.99.99"]}]},"affected":[{"package":{"name":"atlas-query-editor","ecosystem":"npm","purl":"pkg:npm/atlas-query-editor"},"versions":["1.1.1","0.0.1","0.1.0","0.1.1","1.0.1","99.99.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/atlas-query-editor/MAL-2024-10713.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}