{"id":"MAL-2024-9058","summary":"Malicious code in cloudflare-docs-starlight (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (cc416353baa88972c0106ceb1b2fa7077b9cfbcd687be15e44c70ee5edc0c526)\nThe OpenSSF Package Analysis project identified 'cloudflare-docs-starlight' @ 1.1.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-08-11T09:41:07Z","published":"2024-10-01T22:40:44Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-10-01T23:05:09.251903907Z","modified_time":"2024-10-01T22:40:44Z","sha256":"bddf310dc65d6aa543d4bf3e14008b69a0f4fcf79fd17c15262218da33f5737d","source":"ossf-package-analysis","versions":["1.0.0"]},{"modified_time":"2025-08-11T09:10:47Z","sha256":"cc416353baa88972c0106ceb1b2fa7077b9cfbcd687be15e44c70ee5edc0c526","source":"ossf-package-analysis","versions":["1.1.1"],"import_time":"2025-08-11T09:40:43.391480612Z"}]},"affected":[{"package":{"name":"cloudflare-docs-starlight","ecosystem":"npm","purl":"pkg:npm/cloudflare-docs-starlight"},"versions":["1.0.0","1.1.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cloudflare-docs-starlight/MAL-2024-9058.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}