{"id":"MAL-2025-26","summary":"Malicious code in @patternfly-v5/patternfly (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (b43e835ee1484fff5f40f97988af91cf9adfabcef41f9bd4970a9eee273ee7ba)\nThe OpenSSF Package Analysis project identified '@patternfly-v5/patternfly' @ 1.0.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2025-01-08T11:05:37Z","published":"2025-01-07T12:33:06Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-01-07T12:46:21.97193352Z","modified_time":"2025-01-07T12:33:06Z","sha256":"b43e835ee1484fff5f40f97988af91cf9adfabcef41f9bd4970a9eee273ee7ba","source":"ossf-package-analysis","versions":["1.0.2"]},{"sha256":"0420d9b1bd4ab3515341f2555a554322bae6614e7ce4ebd4258492aa73591581","source":"ossf-package-analysis","versions":["1.0.7"],"import_time":"2025-01-08T10:36:43.453480407Z","modified_time":"2025-01-08T10:23:51Z"},{"source":"ossf-package-analysis","versions":["5.3.2"],"import_time":"2025-01-08T11:05:09.133111477Z","modified_time":"2025-01-08T10:48:06Z","sha256":"66a47a432a844a69d3eff0d217ee35b10cb98d86ec0d7ef2537326a78e8103f2"}]},"affected":[{"package":{"name":"@patternfly-v5/patternfly","ecosystem":"npm","purl":"pkg:npm/%40patternfly-v5/patternfly"},"versions":["1.0.2","1.0.7","5.3.2"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@patternfly-v5/patternfly/MAL-2025-26.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}