{"id":"MAL-2024-7902","summary":"Malicious code in @taxify/react-api-gateway (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (867dfc6d0dbc4d22a2d00ebebefdb77e5203cc75ce5a803d010e5b9789f0b2b6)\nThe OpenSSF Package Analysis project identified '@taxify/react-api-gateway' @ 10.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-10-24T01:01:55Z","published":"2024-08-06T16:09:32Z","database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","versions":["10.0.0"],"import_time":"2024-08-06T16:36:38.726283388Z","modified_time":"2024-08-06T16:09:32Z","sha256":"867dfc6d0dbc4d22a2d00ebebefdb77e5203cc75ce5a803d010e5b9789f0b2b6"},{"id":"RLMA-2024-06051","import_time":"2024-10-24T00:56:08.364110808Z","modified_time":"2024-10-16T12:25:28Z","sha256":"e434f16c107c0c4d81cb1e3b321630ac499f09255e4c4e432f05e596c349b8ae","source":"reversing-labs","versions":["8.999.0","10.0.0","10.0.1","10.0.5"]}]},"affected":[{"package":{"name":"@taxify/react-api-gateway","ecosystem":"npm","purl":"pkg:npm/%40taxify/react-api-gateway"},"versions":["10.0.0","8.999.0","10.0.1","10.0.5"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@taxify/react-api-gateway/MAL-2024-7902.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}