{"id":"MAL-2024-4","summary":"Malicious code in new-pro-anu (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c)\nThe OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-06-28T02:53:16Z","published":"2024-01-01T18:57:31Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-01-01T19:04:49.906937974Z","modified_time":"2024-01-01T19:02:24Z","sha256":"0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c","source":"ossf-package-analysis","versions":["1.2.8"]},{"versions":["1.2.9"],"import_time":"2024-01-01T19:04:49.817163233Z","modified_time":"2024-01-01T18:57:31Z","sha256":"32bfad00800eaab2a4c2f7a7f8f42f8ebb61b7820f7cc21613bed85d2a852ae2","source":"ossf-package-analysis"},{"import_time":"2024-01-01T20:04:46.898555474Z","modified_time":"2024-01-01T19:33:55Z","sha256":"20b16d05d8271cf18455e55f5a8f1c9bad0d3d8f985a71d322e18e2a7b1c4cca","source":"ossf-package-analysis","versions":["1.3.0"]},{"id":"RLMA-2024-01388","import_time":"2024-06-28T02:44:01.438035565Z","modified_time":"2024-06-25T12:51:28Z","sha256":"1aedf4b5d59576a7c622833f6142fefa8a8a67d1999cec99e773ca598791621c","source":"reversing-labs","versions":["1.2.9","1.2.8","1.2.5","1.3.0","1.2.6"]}]},"affected":[{"package":{"name":"new-pro-anu","ecosystem":"npm","purl":"pkg:npm/new-pro-anu"},"versions":["1.2.8","1.2.9","1.3.0","1.2.5","1.2.6"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/new-pro-anu/MAL-2024-4.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}