{"id":"MAL-2024-1798","summary":"Malicious code in azure-rest-api-specs-eng-tools (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5)\nThe OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-09-26T11:06:44Z","published":"2024-06-25T12:29:08Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"c296531bd8e782b47a054490b00d289a2b0f8851cc63fcc26d41244777bc0a7b","modified_time":"2024-06-25T12:29:08Z","import_time":"2024-06-28T02:42:00.297007464Z","id":"RLMA-2024-00393","versions":["9.3.4","99.99.99"]},{"source":"reversing-labs","sha256":"c95e268bf10818a4db280e860e4ca73d77774aa1afc6755199d41225b569df46","modified_time":"2024-10-16T12:34:24Z","import_time":"2024-10-24T00:57:34.042474829Z","id":"RLUA-2024-06198"},{"source":"ossf-package-analysis","sha256":"34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5","modified_time":"2025-08-28T10:46:10Z","import_time":"2025-09-01T09:07:32.932671441Z","versions":["1.0.1"]},{"source":"ossf-package-analysis","sha256":"a2cbcdb4bb89cba7fc63560fc239024a2d3fddb64b584452ba1e7e6ec1159786","modified_time":"2025-08-27T10:00:53Z","import_time":"2025-09-01T09:07:32.608553409Z","versions":["1.0.0"]},{"source":"reversing-labs","sha256":"5814d3191bfbfd85459419dbc3f9f9b05636a19866784c790f7be97c61500d84","modified_time":"2025-09-26T09:24:20Z","import_time":"2025-09-26T11:06:11.489654956Z","id":"RLUA-2025-04923","versions":["1.0.0","1.0.1"]}]},"affected":[{"package":{"name":"azure-rest-api-specs-eng-tools","ecosystem":"npm","purl":"pkg:npm/azure-rest-api-specs-eng-tools"},"versions":["9.3.4","99.99.99","1.0.1","1.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/azure-rest-api-specs-eng-tools/MAL-2024-1798.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}