{"id":"MAL-2026-17749","summary":"Malicious code in @myorder-frontend-commons/analytics (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (43a2fe0052005fedc0434fc354ae8777e198113f2371fddfbc9d79ffdd87fbb5)\nThe OpenSSF Package Analysis project identified '@myorder-frontend-commons/analytics' @ 99.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","modified":"2026-10-09T20:30:06.141242627Z","published":"2026-10-09T19:31:38Z","database_specific":{"malicious-packages-origins":[{"sha256":"43a2fe0052005fedc0434fc354ae8777e198113f2371fddfbc9d79ffdd87fbb5","source":"ossf-package-analysis","versions":["99.0.0"],"import_time":"2026-10-09T19:41:44.318327446Z","modified_time":"2026-10-09T19:31:38Z"},{"source":"ossf-package-analysis","versions":["10.0.0"],"import_time":"2026-10-09T19:41:44.450120231Z","modified_time":"2026-10-09T19:34:25Z","sha256":"cc131ca9c1a40353c2c2aa2aba352d0e3ff2df099b3795302a2fcdfdc464f87d"},{"import_time":"2026-10-09T20:19:31.305790105Z","modified_time":"2026-10-09T19:56:04Z","sha256":"062ddd2c612969136a72471502408ce533f8050ce6239517c3d95cccb4e7d0aa","source":"ossf-package-analysis","versions":["3.0.0"]}]},"affected":[{"package":{"name":"@myorder-frontend-commons/analytics","ecosystem":"npm","purl":"pkg:npm/%40myorder-frontend-commons/analytics"},"versions":["99.0.0","10.0.0","3.0.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@myorder-frontend-commons/analytics/MAL-2026-17749.json"}}],"schema_version":"1.9.0","credits":[{"name":"OpenSSF: Package Analysis","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"],"type":"FINDER"}]}