{"id":"MAL-2024-5","summary":"Malicious code in @cartus-core/cartus-common-ui2 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (dda6d81204f2c556310cb11a7875e4f74aff47c159c093a77d424c32911db2e6)\nThe OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui2' @ 11230000951.0.6 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-01-01T22:33:56Z","published":"2024-01-01T21:28:37Z","database_specific":{"malicious-packages-origins":[{"versions":["11230000951.0.8"],"import_time":"2024-01-01T22:04:55.208534677Z","modified_time":"2024-01-01T21:48:37Z","sha256":"4c01673039147e422f15ac0fff6243ba64a147b373c12f666dbf693b3b9f74fe","source":"ossf-package-analysis"},{"import_time":"2024-01-01T22:33:40.452744296Z","modified_time":"2024-01-01T21:28:37Z","sha256":"dda6d81204f2c556310cb11a7875e4f74aff47c159c093a77d424c32911db2e6","source":"ossf-package-analysis","versions":["11230000951.0.6"]}]},"affected":[{"package":{"name":"@cartus-core/cartus-common-ui2","ecosystem":"npm","purl":"pkg:npm/%40cartus-core/cartus-common-ui2"},"versions":["11230000951.0.8","11230000951.0.6"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@cartus-core/cartus-common-ui2/MAL-2024-5.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}