{"id":"MAL-2024-8849","summary":"Malicious code in video.min (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (1b2a0713372942343830cd53ad3ad5ffe4dcf7e827523510ef79e32b38f67db3)\nThe OpenSSF Package Analysis project identified 'video.min' @ 1.0.22 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-09-09T14:06:36Z","published":"2024-09-09T05:56:27Z","database_specific":{"malicious-packages-origins":[{"sha256":"07ef81028795b68dd8a734f2c2c3608ed9a4a440707058b6d23efd3c0eae5ed5","modified_time":"2024-09-09T05:56:27Z","import_time":"2024-09-09T06:07:34.639363786Z","versions":["1.0.0"],"source":"ossf-package-analysis"},{"sha256":"d9b5424490f1a42706a0cf2bdf96eae92fbb598fc2322027703f2378fc93260d","modified_time":"2024-09-09T06:38:41Z","import_time":"2024-09-09T06:39:40.963434475Z","versions":["1.0.1"],"source":"ossf-package-analysis"},{"sha256":"1b2a0713372942343830cd53ad3ad5ffe4dcf7e827523510ef79e32b38f67db3","modified_time":"2024-09-09T06:55:33Z","import_time":"2024-09-09T07:05:23.36164559Z","versions":["1.0.22"],"source":"ossf-package-analysis"},{"sha256":"129c0f91ae83604d47172c5afee5ce4e61f67486cb4b5d13fc6704917530d7f6","modified_time":"2024-09-09T07:52:29Z","import_time":"2024-09-09T08:07:26.093837896Z","versions":["1.0.2"],"source":"ossf-package-analysis"},{"sha256":"79750f62e6caf887bcebcf4de078df93d965c13af9ca247f142e1cbbeb8c9a3a","modified_time":"2024-09-09T11:30:52Z","import_time":"2024-09-09T11:34:01.671771054Z","versions":["1.0.31"],"source":"ossf-package-analysis"},{"sha256":"89e9dbd6b200e210ac63f788586755a1cffbac761243a7cc873636b7442bc369","modified_time":"2024-09-09T11:35:54Z","import_time":"2024-09-09T12:08:39.915678417Z","versions":["1.0.32"],"source":"ossf-package-analysis"},{"sha256":"b0b24e936cbbc7e7de204b6e362d6236b61de9d5616485d554199a12103e5eb3","modified_time":"2024-09-09T11:51:46Z","import_time":"2024-09-09T12:08:40.215823261Z","versions":["1.0.33"],"source":"ossf-package-analysis"},{"sha256":"d5fe52f034c526a09eb15ad8b3419bb67669f51431ee8ee475fb4d329bfedb03","modified_time":"2024-09-09T13:21:03Z","import_time":"2024-09-09T13:36:15.014313292Z","versions":["1.0.38"],"source":"ossf-package-analysis"},{"sha256":"a219f5d7f433d9afc7d996081fa7c3fd57a1d127d00d861dbd3dd86ca20e19f7","modified_time":"2024-09-09T13:43:07Z","import_time":"2024-09-09T14:05:22.546194691Z","versions":["1.0.39"],"source":"ossf-package-analysis"},{"sha256":"b4a50efd5026d322267045de28c0a9bac0cbd503e63a7354d3a63635b4ce1325","modified_time":"2024-09-09T13:51:00Z","import_time":"2024-09-09T14:05:22.622259774Z","versions":["1.0.40"],"source":"ossf-package-analysis"}]},"affected":[{"package":{"name":"video.min","ecosystem":"npm","purl":"pkg:npm/video.min"},"versions":["1.0.0","1.0.1","1.0.22","1.0.2","1.0.31","1.0.32","1.0.33","1.0.38","1.0.39","1.0.40"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/video.min/MAL-2024-8849.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}