{"id":"MAL-2024-992","summary":"Malicious code in en-calendar (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0cc66d6eb2f773deb786b69bc29863caf4091bd2bd1f9fe0b7fdaa6fe14aca89)\nThe OpenSSF Package Analysis project identified 'en-calendar' @ 1.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2024-06-28T02:53:16Z","published":"2024-02-12T01:31:58Z","database_specific":{"malicious-packages-origins":[{"sha256":"0cc66d6eb2f773deb786b69bc29863caf4091bd2bd1f9fe0b7fdaa6fe14aca89","source":"ossf-package-analysis","versions":["1.0.1"],"import_time":"2024-02-12T07:33:20.928508427Z","modified_time":"2024-02-12T01:31:58Z"},{"versions":["1.0.2"],"import_time":"2024-02-12T07:33:21.00056618Z","modified_time":"2024-02-12T01:35:19Z","sha256":"efcdbbcfadda031e08f335dbd0e4b44b653dbb2a34868297d1f13ecc3d45818c","source":"ossf-package-analysis"},{"id":"RLMA-2024-00944","import_time":"2024-06-28T02:43:06.821158988Z","modified_time":"2024-06-25T12:41:18Z","sha256":"ddc4fd9ad1912d542c0f590e48439901f1e48dfbd541d4b4cae91ede43c29871","source":"reversing-labs","versions":["3.3.999","3.3.99991","1.0.1","1.0.2","3.3.9991"]}]},"affected":[{"package":{"name":"en-calendar","ecosystem":"npm","purl":"pkg:npm/en-calendar"},"versions":["1.0.1","1.0.2","3.3.999","3.3.99991","3.3.9991"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/en-calendar/MAL-2024-992.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}