{"id":"MAL-2024-989","summary":"Malicious code in en-task-helpers (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8)\nThe OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2024-02-12T03:05:07Z","published":"2024-02-12T02:04:20Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-02-12T02:10:28.927467125Z","modified_time":"2024-02-12T02:04:20Z","sha256":"effc1e86fc9bbc2cd62b841852aa869d5e6bd6343d83ee38075422a2755eeeea","source":"ossf-package-analysis","versions":["1.29.1"]},{"sha256":"430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8","source":"ossf-package-analysis","versions":["1.29.20"],"import_time":"2024-02-12T03:04:46.934241896Z","modified_time":"2024-02-12T02:46:43Z"}]},"affected":[{"package":{"name":"en-task-helpers","ecosystem":"npm","purl":"pkg:npm/en-task-helpers"},"versions":["1.29.1","1.29.20"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/en-task-helpers/MAL-2024-989.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}