{"id":"MAL-2025-2231","summary":"Malicious code in @partner-tech/pax-illustrations (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (59fd97ac6b88180973bc6765a95cc0730d5de2879c68c3d7d29dda4531b7fbec)\nThe OpenSSF Package Analysis project identified '@partner-tech/pax-illustrations' @ 99.99.106 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-03-11T09:36:38Z","published":"2025-03-11T09:02:15Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-03-11T09:06:25.941347079Z","modified_time":"2025-03-11T09:02:15Z","sha256":"59fd97ac6b88180973bc6765a95cc0730d5de2879c68c3d7d29dda4531b7fbec","source":"ossf-package-analysis","versions":["99.99.106"]},{"source":"ossf-package-analysis","versions":["99.99.104"],"import_time":"2025-03-11T09:36:07.281266051Z","modified_time":"2025-03-11T09:25:15Z","sha256":"59ca7e426d2a6777733355b5c761a8da306aadc42a4b01c9967e0ccbb09bc2be"}]},"affected":[{"package":{"name":"@partner-tech/pax-illustrations","ecosystem":"npm","purl":"pkg:npm/%40partner-tech/pax-illustrations"},"versions":["99.99.106","99.99.104"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@partner-tech/pax-illustrations/MAL-2025-2231.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}