{"id":"MAL-2024-8963","summary":"Malicious code in common-icons (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf)\nThe OpenSSF Package Analysis project identified 'common-icons' @ 1.0.83 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-09-25T09:35:52Z","published":"2024-09-25T08:46:25Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-09-25T09:05:30.276422809Z","modified_time":"2024-09-25T08:46:25Z","sha256":"928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf","source":"ossf-package-analysis","versions":["1.0.83"]},{"import_time":"2024-09-25T09:35:27.067824463Z","modified_time":"2024-09-25T09:26:37Z","sha256":"76d768eb90101f52b1c577613e453dd7f393f3e30df55076a1e50cbeb3884f55","source":"ossf-package-analysis","versions":["1.0.84"]},{"source":"ossf-package-analysis","versions":["1.0.86"],"import_time":"2024-09-25T09:35:27.204521829Z","modified_time":"2024-09-25T09:31:28Z","sha256":"91f6851a2d83a1a268d5cdf204622e4996a8cc1a950dfeb45c796fed87cc5876"}]},"affected":[{"package":{"name":"common-icons","ecosystem":"npm","purl":"pkg:npm/common-icons"},"versions":["1.0.83","1.0.84","1.0.86"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/common-icons/MAL-2024-8963.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}