{"id":"MAL-2024-1274","summary":"Malicious code in ui-common-components-angular (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9)\nThe OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-11-06T16:06:49Z","published":"2024-04-18T01:15:48Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-04-18T01:26:12.094421525Z","modified_time":"2024-04-18T01:15:48Z","sha256":"c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9","source":"ossf-package-analysis","versions":["1.3.1"]},{"versions":["3.3.1"],"import_time":"2024-11-06T16:06:19.426184072Z","modified_time":"2024-11-06T15:55:57Z","sha256":"104bcb4cb250fa8e377c13598a3f167dc9f0d8822fec8c01525676e13abf5c74","source":"ossf-package-analysis"}]},"affected":[{"package":{"name":"ui-common-components-angular","ecosystem":"npm","purl":"pkg:npm/ui-common-components-angular"},"versions":["1.3.1","3.3.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ui-common-components-angular/MAL-2024-1274.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}