{"id":"MAL-2024-12084","summary":"Malicious code in @shahwarhello/l2geth (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (d5aced97b470cf82beae6ab385323996a424bcf3bb43f800076b4e3158e6d701)\nThe OpenSSF Package Analysis project identified '@shahwarhello/l2geth' @ 0.5.11 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-12-21T07:03:19Z","published":"2024-12-21T07:03:19Z","database_specific":{"malicious-packages-origins":[{"versions":["0.5.11"],"import_time":"2024-12-21T07:05:09.876556862Z","modified_time":"2024-12-21T07:03:19Z","sha256":"d5aced97b470cf82beae6ab385323996a424bcf3bb43f800076b4e3158e6d701","source":"ossf-package-analysis"}]},"affected":[{"package":{"name":"@shahwarhello/l2geth","ecosystem":"npm","purl":"pkg:npm/%40shahwarhello/l2geth"},"versions":["0.5.11"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@shahwarhello/l2geth/MAL-2024-12084.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}