{"id":"MAL-2024-7900","summary":"Malicious code in @taxify/trippricing (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21)\nThe OpenSSF Package Analysis project identified '@taxify/trippricing' @ 9.999.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-10-24T01:01:55Z","published":"2024-08-06T15:26:51Z","database_specific":{"malicious-packages-origins":[{"versions":["9.999.0"],"import_time":"2024-08-06T15:34:13.399448995Z","modified_time":"2024-08-06T15:26:51Z","sha256":"ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21","source":"ossf-package-analysis"},{"id":"RLMA-2024-06055","import_time":"2024-10-24T00:56:08.644283788Z","modified_time":"2024-10-16T12:25:34Z","sha256":"f81dcc123484e98a5462edadfffb01c4df36641059859e97111b8e43702caf10","source":"reversing-labs","versions":["8.999.0","9.999.0","10.0.6"]}]},"affected":[{"package":{"name":"@taxify/trippricing","ecosystem":"npm","purl":"pkg:npm/%40taxify/trippricing"},"versions":["9.999.0","8.999.0","10.0.6"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@taxify/trippricing/MAL-2024-7900.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}