{"id":"MAL-2025-190614","summary":"Malicious code in sentry-ui (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (10b344e30280f8d412e7bb23ee828cea19637206f94ef992a20c372957c53b32)\nThe package sentry-ui was found to contain malicious code.\n\n## Source: ossf-package-analysis (0b85c24be03cc1591f4f90aaa715d90239fc057662818a7078b3431cbea2e44f)\nThe OpenSSF Package Analysis project identified 'sentry-ui' @ 296.8.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2025-11-24T16:09:31Z","published":"2025-11-22T12:46:08Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-11-22T12:47:10.787915032Z","modified_time":"2025-11-22T12:46:08Z","sha256":"0b85c24be03cc1591f4f90aaa715d90239fc057662818a7078b3431cbea2e44f","source":"ossf-package-analysis","versions":["296.8.0"]},{"import_time":"2025-11-24T16:07:47.333215365Z","modified_time":"2025-11-24T15:54:02Z","sha256":"10b344e30280f8d412e7bb23ee828cea19637206f94ef992a20c372957c53b32","source":"amazon-inspector","versions":["296.8.0"]}]},"affected":[{"package":{"name":"sentry-ui","ecosystem":"npm","purl":"pkg:npm/sentry-ui"},"versions":["296.8.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sentry-ui/MAL-2025-190614.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}