{"id":"MAL-2025-41446","summary":"Malicious code in gx-ui-common (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (bd19f4cdc84c6328351c4c3bda0cd8bde0ae5d9ed6b743d85a70f6a50670c6a1)\nThe OpenSSF Package Analysis project identified 'gx-ui-common' @ 1.2.66 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-09-26T11:06:45Z","published":"2025-08-28T14:21:14Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-08-28T14:38:04.613900003Z","modified_time":"2025-08-28T14:21:14Z","sha256":"bd19f4cdc84c6328351c4c3bda0cd8bde0ae5d9ed6b743d85a70f6a50670c6a1","source":"ossf-package-analysis","versions":["1.2.66"]},{"source":"ossf-package-analysis","versions":["1.2.68"],"import_time":"2025-09-02T16:07:09.565546291Z","modified_time":"2025-09-02T15:46:03Z","sha256":"0321bc61b9d52b8b81a4fcb5eee578b3fb94fdc0e157a124871a9c2ff80c4ad2"},{"import_time":"2025-09-26T11:05:54.072985819Z","modified_time":"2025-09-26T09:32:52Z","sha256":"ee33c51c399905151ca99b21397d5c04d493cf4c3522d43d5fbe5069d89df893","source":"reversing-labs","versions":["1.0.0","1.2.63","1.2.64","1.2.65","1.2.66","1.2.67","1.2.68"],"id":"RLMA-2025-05029"}]},"affected":[{"package":{"name":"gx-ui-common","ecosystem":"npm","purl":"pkg:npm/gx-ui-common"},"versions":["1.0.0","1.2.64","1.2.65","1.2.66","1.2.67","1.2.68","1.2.63"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/gx-ui-common/MAL-2025-41446.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}