{"id":"MAL-2024-11919","summary":"Malicious code in yandex-pandora-docs (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438)\nThe OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-12-19T11:34:50Z","published":"2024-12-19T02:06:18Z","database_specific":{"malicious-packages-origins":[{"versions":["1.0.0"],"import_time":"2024-12-19T02:30:57.577772795Z","modified_time":"2024-12-19T02:06:18Z","sha256":"e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438","source":"ossf-package-analysis"},{"import_time":"2024-12-19T11:34:19.173538753Z","modified_time":"2024-12-19T11:16:10Z","sha256":"fb0688db0ea683deea638be77da1f8260fabd107dd363d197c8f71479f93ce60","source":"ossf-package-analysis","versions":["1.0.1"]}]},"affected":[{"package":{"name":"yandex-pandora-docs","ecosystem":"npm","purl":"pkg:npm/yandex-pandora-docs"},"versions":["1.0.0","1.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/yandex-pandora-docs/MAL-2024-11919.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}