{"id":"MAL-2024-7748","summary":"Malicious code in aroly-test (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (5559e3338ab9d433fec892063a5f0ec5ac1164490196c5a095bc2ffb723e6290)\nThe OpenSSF Package Analysis project identified 'aroly-test' @ 1.0.10 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-07-15T22:05:21Z","published":"2024-07-10T09:30:50Z","database_specific":{"malicious-packages-origins":[{"sha256":"1abcd46ebb2fac32fb8dda0616f7627c1e719cbbffbbafae8309d995d6f6bd7e","source":"ossf-package-analysis","versions":["1.0.5"],"import_time":"2024-07-15T22:04:54.127706348Z","modified_time":"2024-07-10T09:41:03Z"},{"source":"ossf-package-analysis","versions":["1.0.7"],"import_time":"2024-07-15T22:04:54.217085001Z","modified_time":"2024-07-10T09:56:00Z","sha256":"31a86873e515b2a7d2c918073449e8153cbca1deaf41148e60fa1355e85ff7cd"},{"versions":["1.0.4"],"import_time":"2024-07-15T22:04:54.055287828Z","modified_time":"2024-07-10T09:30:50Z","sha256":"369dbcb7644b3ebdb1e3a45a49d498eeb2d9d04f365a320eb803dac05a5cfc1e","source":"ossf-package-analysis"},{"import_time":"2024-07-15T22:04:54.468458269Z","modified_time":"2024-07-10T11:46:53Z","sha256":"5559e3338ab9d433fec892063a5f0ec5ac1164490196c5a095bc2ffb723e6290","source":"ossf-package-analysis","versions":["1.0.10"]},{"import_time":"2024-07-15T22:04:54.322550465Z","modified_time":"2024-07-10T10:10:39Z","sha256":"684dace6b05e7a455565861369a54f5ed6c904dac30615e442f5cef2997da71f","source":"ossf-package-analysis","versions":["1.0.8"]}]},"affected":[{"package":{"name":"aroly-test","ecosystem":"npm","purl":"pkg:npm/aroly-test"},"versions":["1.0.5","1.0.7","1.0.4","1.0.10","1.0.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/aroly-test/MAL-2024-7748.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}