{"id":"MAL-2025-3661","summary":"Malicious code in @ebay-business-components/marko-rum (npm)","details":"The package communicates with a domain associated with malicious activity.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2025-05-22T14:07:46Z","published":"2025-05-05T15:29:05Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-02641","import_time":"2025-05-22T14:06:41.526151394Z","modified_time":"2025-05-22T12:34:48Z","sha256":"78852e08a84faf95b74ae6f49e3c754144022f4702065465f2c25c416c494bc1","source":"reversing-labs","versions":["99.9.0","99.9.1"]}]},"affected":[{"package":{"name":"@ebay-business-components/marko-rum","ecosystem":"npm","purl":"pkg:npm/%40ebay-business-components/marko-rum"},"ranges":[{"type":"SEMVER","events":[{"introduced":"99.9.1"}]}],"versions":["99.9.0","99.9.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ebay-business-components/marko-rum/MAL-2025-3661.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}