{"id":"MAL-2024-2672","summary":"Malicious code in mozilla-central (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (6bee454a894c37c1ab6f11580801deac1455d7114675e371cdec10ed8966f562)\nThe OpenSSF Package Analysis project identified 'mozilla-central' @ 1.1.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-12-17T22:37:07Z","published":"2024-06-25T12:50:40Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-06-25T12:50:40Z","sha256":"aa3560694e0df29720fd091348f5165c3c319aaf88c86bbc813194488a80c054","source":"reversing-labs","versions":["23.0.0"],"id":"RLMA-2024-01361","import_time":"2024-06-28T02:43:57.986669899Z"},{"sha256":"a3401b7d9302657890e7aa9889d30571e6c453d35621ef65097537dfd2c2c51f","source":"reversing-labs","id":"RLUA-2024-06920","import_time":"2024-10-24T00:58:05.474061097Z","modified_time":"2024-10-16T13:04:34Z"},{"modified_time":"2024-12-15T17:29:25Z","sha256":"6bee454a894c37c1ab6f11580801deac1455d7114675e371cdec10ed8966f562","source":"ossf-package-analysis","versions":["1.1.1"],"import_time":"2024-12-15T17:34:45.692987557Z"},{"sha256":"8e7b76f756ed2d207e8b8d28dfd31db006304ab74b58e5bf7a2ce1c0c0b4d41d","source":"ossf-package-analysis","versions":["1.1.2"],"import_time":"2024-12-17T22:36:35.494244045Z","modified_time":"2024-12-17T22:31:05Z"}]},"affected":[{"package":{"name":"mozilla-central","ecosystem":"npm","purl":"pkg:npm/mozilla-central"},"versions":["23.0.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mozilla-central/MAL-2024-2672.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}