{"id":"MAL-2024-11930","summary":"Malicious code in @rrvis/util (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ad43b6638939470c2a7d61940a0ce570cc0c6626f18e8afb0bee627cae6c7fc2)\nThe OpenSSF Package Analysis project identified '@rrvis/util' @ 99.99.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2025-03-03T15:08:00Z","published":"2024-12-19T23:17:27Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-12-19T23:34:10.120234156Z","modified_time":"2024-12-19T23:17:27Z","sha256":"ad43b6638939470c2a7d61940a0ce570cc0c6626f18e8afb0bee627cae6c7fc2","source":"ossf-package-analysis","versions":["99.99.2"]},{"import_time":"2024-12-20T16:06:05.033629886Z","modified_time":"2024-12-20T15:55:57Z","sha256":"83f35319574b52a525a1b5f976a915f8e2ef18490616070417c784dbf4f9343d","source":"ossf-package-analysis","versions":["99.99.3"]},{"import_time":"2025-03-03T15:06:16.524172221Z","modified_time":"2025-03-03T13:13:33Z","sha256":"4df34e8bc1d9d96364479a61952800da84a91171dc293e094a3d7b037e8e2aaf","source":"reversing-labs","versions":["99.99.1","99.99.2","99.99.3"],"id":"RLMA-2025-00576"}]},"affected":[{"package":{"name":"@rrvis/util","ecosystem":"npm","purl":"pkg:npm/%40rrvis/util"},"versions":["99.99.2","99.99.3","99.99.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@rrvis/util/MAL-2024-11930.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}