{"id":"MAL-2024-11912","summary":"Malicious code in focal-examples (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530)\nThe OpenSSF Package Analysis project identified 'focal-examples' @ 9.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-12-20T00:22:07Z","published":"2024-12-18T09:59:04Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-12-18T09:59:04Z","sha256":"a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530","source":"ossf-package-analysis","versions":["9.9.9"],"import_time":"2024-12-18T10:06:04.638955231Z"},{"import_time":"2024-12-20T00:21:37.677697557Z","modified_time":"2024-12-19T21:30:58Z","sha256":"29b0fb3c0ca96638ee023e4d20c023b93c89699aca06fee01e7d50e371fec522","source":"ossf-package-analysis","versions":["9.9.12"]},{"modified_time":"2024-12-19T21:00:46Z","sha256":"4a37bf9324ce9ae42876943d3c5d7bf09efa7fc1db409f9d050e13bf97d05e5f","source":"ossf-package-analysis","versions":["9.9.10"],"import_time":"2024-12-20T00:21:37.564145945Z"}]},"affected":[{"package":{"name":"focal-examples","ecosystem":"npm","purl":"pkg:npm/focal-examples"},"versions":["9.9.9","9.9.12","9.9.10"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/focal-examples/MAL-2024-11912.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}