{"id":"MAL-2024-12094","summary":"Malicious code in ui-forms-embed-components-reporting (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7)\nThe OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-12-22T04:50:49Z","published":"2024-12-22T04:50:49Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-12-22T04:50:49Z","sha256":"2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7","source":"ossf-package-analysis","versions":["1.21.0"],"import_time":"2024-12-22T05:05:22.065109406Z"}]},"affected":[{"package":{"name":"ui-forms-embed-components-reporting","ecosystem":"npm","purl":"pkg:npm/ui-forms-embed-components-reporting"},"versions":["1.21.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ui-forms-embed-components-reporting/MAL-2024-12094.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}