{"id":"MAL-2025-797","summary":"Malicious code in analytics-bp-passive-tracker-loader (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (acb2b0591e0d61f597b43b55a8fd70dfcb8aca1d696e09f2a63c4f6f5c5a1959)\nThe OpenSSF Package Analysis project identified 'analytics-bp-passive-tracker-loader' @ 99.99.100 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n","modified":"2025-08-29T06:43:16Z","published":"2025-02-03T16:44:45Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-00063","import_time":"2025-02-03T18:37:46.069700622Z","modified_time":"2025-02-03T16:44:45Z","sha256":"07bc7fc8f296a8fee8e857ba63439243c874e306aa3a9d7cbaeb3921e23a93ff","source":"reversing-labs","versions":["1.0.0","99.90.1","99.91.1","99.92.1"]},{"modified_time":"2025-07-24T19:34:27Z","sha256":"acb2b0591e0d61f597b43b55a8fd70dfcb8aca1d696e09f2a63c4f6f5c5a1959","source":"ossf-package-analysis","versions":["99.99.100"],"import_time":"2025-07-24T19:35:25.948168983Z"},{"id":"RLUA-2025-04450","import_time":"2025-08-29T06:42:45.692562022Z","modified_time":"2025-08-28T07:18:58Z","sha256":"4e474d5b32e41b20377849719916f8a16b90b0ac4a99fa2a5c48568752222d1c","source":"reversing-labs","versions":["99.99.99","99.99.100"]}]},"affected":[{"package":{"name":"analytics-bp-passive-tracker-loader","ecosystem":"npm","purl":"pkg:npm/analytics-bp-passive-tracker-loader"},"versions":["1.0.0","99.90.1","99.91.1","99.92.1","99.99.100","99.99.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/analytics-bp-passive-tracker-loader/MAL-2025-797.json"}}],"schema_version":"1.7.3","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}