{"id":"MAL-2024-9298","summary":"Malicious code in @coyo/ui (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (986db3d3f9403677037ca5dfa1eb6cbe730fa4d3686adb30602be2c8f5747e6e)\nThe OpenSSF Package Analysis project identified '@coyo/ui' @ 2.2.3 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-10-15T15:35:58Z","published":"2024-10-15T14:56:08Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-10-15T15:05:36.57331088Z","modified_time":"2024-10-15T14:56:08Z","sha256":"986db3d3f9403677037ca5dfa1eb6cbe730fa4d3686adb30602be2c8f5747e6e","source":"ossf-package-analysis","versions":["2.2.3"]},{"versions":["2.2.4"],"import_time":"2024-10-15T15:35:33.840358446Z","modified_time":"2024-10-15T15:08:08Z","sha256":"d215d73d01feb0ceb75542b98c3575176660cae65725ea6dc7c1d6a4e3fe7159","source":"ossf-package-analysis"}]},"affected":[{"package":{"name":"@coyo/ui","ecosystem":"npm","purl":"pkg:npm/%40coyo/ui"},"versions":["2.2.3","2.2.4"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@coyo/ui/MAL-2024-9298.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}