{"id":"MAL-2025-3031","summary":"Malicious code in one-venafi-local-store-manager (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220)\nThe OpenSSF Package Analysis project identified 'one-venafi-local-store-manager' @ 1.0.8 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2025-04-02T18:40:58Z","published":"2025-04-02T17:40:46Z","database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","versions":["1.0.8"],"import_time":"2025-04-02T18:07:26.899966099Z","modified_time":"2025-04-02T17:55:55Z","sha256":"6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220"},{"import_time":"2025-04-02T18:07:26.840096991Z","modified_time":"2025-04-02T17:40:46Z","sha256":"b95de0e8e7bda81c1cd85ec86bd2cbde03b9e970c7a09292d1efed528eb38f59","source":"ossf-package-analysis","versions":["1.0.3"]},{"import_time":"2025-04-02T18:40:24.18796226Z","modified_time":"2025-04-02T18:10:55Z","sha256":"2402a7df0fb144042dcc65e036698bf145672a47bcc29d6fc953a4fa5c6d8d65","source":"ossf-package-analysis","versions":["1.0.9"]}]},"affected":[{"package":{"name":"one-venafi-local-store-manager","ecosystem":"npm","purl":"pkg:npm/one-venafi-local-store-manager"},"versions":["1.0.8","1.0.3","1.0.9"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/one-venafi-local-store-manager/MAL-2025-3031.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}