{"id":"MAL-2024-1641","summary":"Malicious code in @wdpx/themes (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (027f3f6ecca8b2d2bd6a4d8c6b358eb1ea8ea1f094cfe3d2606095b6b17d822f)\nThe OpenSSF Package Analysis project identified '@wdpx/themes' @ 3.0.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-06-19T11:22:12Z","published":"2024-06-19T11:22:12Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-06-19T11:33:32.886250522Z","modified_time":"2024-06-19T11:22:12Z","sha256":"027f3f6ecca8b2d2bd6a4d8c6b358eb1ea8ea1f094cfe3d2606095b6b17d822f","source":"ossf-package-analysis","versions":["3.0.2"]}]},"affected":[{"package":{"name":"@wdpx/themes","ecosystem":"npm","purl":"pkg:npm/%40wdpx/themes"},"versions":["3.0.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@wdpx/themes/MAL-2024-1641.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}