{"id":"MAL-2024-1168","summary":"Malicious code in qlik-sense-poc (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e3ca1728f46e0ecfd22305ab1dd8de7134e1d067e7c76f5d9e4871424fbf9148)\nThe OpenSSF Package Analysis project identified 'qlik-sense-poc' @ 5.5.991 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-04-02T22:34:16Z","published":"2024-04-02T19:06:34Z","database_specific":{"malicious-packages-origins":[{"sha256":"0ab92f1077a0cc13ce5b1eb263a6e89d74640e589c1e383d05a68a2560be2160","source":"ossf-package-analysis","versions":["5.5.99"],"import_time":"2024-04-02T19:33:58.265032007Z","modified_time":"2024-04-02T19:06:34Z"},{"import_time":"2024-04-02T21:04:47.583060269Z","modified_time":"2024-04-02T20:50:48Z","sha256":"e3ca1728f46e0ecfd22305ab1dd8de7134e1d067e7c76f5d9e4871424fbf9148","source":"ossf-package-analysis","versions":["5.5.991"]},{"import_time":"2024-04-02T22:33:56.536758096Z","modified_time":"2024-04-02T22:20:07Z","sha256":"235f7bd79a1fe67306e75e5b0a0af807e25f3c31fbb11a88d09403162db67f1c","source":"ossf-package-analysis","versions":["5.5.992"]}]},"affected":[{"package":{"name":"qlik-sense-poc","ecosystem":"npm","purl":"pkg:npm/qlik-sense-poc"},"versions":["5.5.99","5.5.991","5.5.992"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/qlik-sense-poc/MAL-2024-1168.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}