{"id":"MAL-2025-4620","summary":"Malicious code in @seo-frontend-components/card-blog-carousel-mobile (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (1eaa599a9c0235a5d52b5534f4177883c03e7ae19496ef98593fadfc3a7ccef8)\nThe OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-carousel-mobile' @ 1.999.2 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-06-02T00:27:04Z","published":"2025-05-31T15:32:22Z","database_specific":{"malicious-packages-origins":[{"sha256":"1eaa599a9c0235a5d52b5534f4177883c03e7ae19496ef98593fadfc3a7ccef8","source":"ossf-package-analysis","versions":["1.999.2"],"import_time":"2025-06-02T00:26:28.346953674Z","modified_time":"2025-06-01T06:53:03Z"},{"modified_time":"2025-06-01T06:30:57Z","sha256":"28ce8001447e0f30f937107c0ab6572c7639a90da666b8b36e5af819f3ce6e62","source":"ossf-package-analysis","versions":["1.999.1"],"import_time":"2025-06-02T00:26:28.280981399Z"},{"source":"ossf-package-analysis","versions":["1.999.0"],"import_time":"2025-06-02T00:26:27.675187125Z","modified_time":"2025-05-31T15:32:22Z","sha256":"aec1e5ef497e20fcaf055a5694fca1f5b1d858bf8ad12e2327ab2b1befeb3d4e"}]},"affected":[{"package":{"name":"@seo-frontend-components/card-blog-carousel-mobile","ecosystem":"npm","purl":"pkg:npm/%40seo-frontend-components/card-blog-carousel-mobile"},"versions":["1.999.2","1.999.1","1.999.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@seo-frontend-components/card-blog-carousel-mobile/MAL-2025-4620.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}