{"id":"MAL-2024-1272","summary":"Malicious code in @portal-packages/core (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (48accd040235db7bd6be1bcdc1f268ed9f438c3d3029090ee357139bbe870759)\nThe OpenSSF Package Analysis project identified '@portal-packages/core' @ 15.105.105 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-04-18T04:33:54Z","published":"2024-04-17T01:45:53Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-04-17T02:12:15.028443577Z","modified_time":"2024-04-17T01:58:54Z","sha256":"f47ebcede26e7c81b33ab0948ee1ba860173ae87965fe7be527365f07f6c006c","source":"ossf-package-analysis","versions":["15.100.100"]},{"import_time":"2024-04-17T10:33:50.196788518Z","modified_time":"2024-04-17T10:20:56Z","sha256":"48accd040235db7bd6be1bcdc1f268ed9f438c3d3029090ee357139bbe870759","source":"ossf-package-analysis","versions":["15.105.105"]},{"import_time":"2024-04-18T04:33:37.627930369Z","modified_time":"2024-04-17T01:45:53Z","sha256":"b5e965ac2cc47f6249b26d9c89b2de3d0ebb3aa049ef6def3e6b81a821516844","source":"ossf-package-analysis","versions":["15.99.99"]}]},"affected":[{"package":{"name":"@portal-packages/core","ecosystem":"npm","purl":"pkg:npm/%40portal-packages/core"},"versions":["15.100.100","15.105.105","15.99.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@portal-packages/core/MAL-2024-1272.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}