{"id":"MAL-2024-7774","summary":"Malicious code in fe-bootstrap (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4)\nThe OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-10-24T01:01:56Z","published":"2024-07-19T14:52:38Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-07-19T15:05:30.05192521Z","modified_time":"2024-07-19T14:52:38Z","sha256":"f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4","source":"ossf-package-analysis","versions":["70.69.69"]},{"sha256":"b75142c09ae507d987fbdc335a237c4b4d4cbc6a72770472a6233ed963d3f83f","source":"ossf-package-analysis","versions":["71.69.69"],"import_time":"2024-07-23T13:07:11.571267803Z","modified_time":"2024-07-23T12:56:29Z"},{"versions":["69.69.69","71.69.69"],"id":"RLMA-2024-06580","import_time":"2024-10-24T00:56:23.573712293Z","modified_time":"2024-10-16T12:52:48Z","sha256":"cc24c9cfa7816096d115c7343b85369892939b0585daa70573b199540119d44c","source":"reversing-labs"}]},"affected":[{"package":{"name":"fe-bootstrap","ecosystem":"npm","purl":"pkg:npm/fe-bootstrap"},"versions":["70.69.69","71.69.69","69.69.69"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fe-bootstrap/MAL-2024-7774.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}