{"id":"MAL-2024-8707","summary":"Malicious code in mhnumjp (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (371f7362253fbbd65f7a86aac45e8363e35760789892d19b77a4a09ee4d76ecf)\nThe OpenSSF Package Analysis project identified 'mhnumjp' @ 1.999.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-09-03T10:55:59Z","published":"2024-09-03T10:55:59Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-09-03T10:55:59Z","sha256":"371f7362253fbbd65f7a86aac45e8363e35760789892d19b77a4a09ee4d76ecf","source":"ossf-package-analysis","versions":["1.999.1"],"import_time":"2024-09-03T11:05:15.685927202Z"}]},"affected":[{"package":{"name":"mhnumjp","ecosystem":"npm","purl":"pkg:npm/mhnumjp"},"versions":["1.999.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mhnumjp/MAL-2024-8707.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}