{"id":"MAL-2024-11886","summary":"Malicious code in @monkey-tilt/ui (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (8ac39833535be0553f3d6a87a64286940b30b0fc55a5e1c80c907518b10053b8)\nThe OpenSSF Package Analysis project identified '@monkey-tilt/ui' @ 1.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-12-18T23:34:49Z","published":"2024-12-17T00:50:26Z","database_specific":{"malicious-packages-origins":[{"versions":["1.0.0"],"import_time":"2024-12-17T01:33:21.322101532Z","modified_time":"2024-12-17T00:50:26Z","sha256":"8ac39833535be0553f3d6a87a64286940b30b0fc55a5e1c80c907518b10053b8","source":"ossf-package-analysis"},{"import_time":"2024-12-18T23:34:23.112551766Z","modified_time":"2024-12-18T23:31:27Z","sha256":"5e3d6f3a1d7a4359b196c02a4846ae1c6c1f2503b55b368ae5092f804f401113","source":"ossf-package-analysis","versions":["1.0.1"]}]},"affected":[{"package":{"name":"@monkey-tilt/ui","ecosystem":"npm","purl":"pkg:npm/%40monkey-tilt/ui"},"versions":["1.0.0","1.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@monkey-tilt/ui/MAL-2024-11886.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}