diff --git a/osv/malicious/npm/symphony-familiarity/MAL-0000-ossf-package-analysis-7ed9c72eb4d27674.json b/osv/malicious/npm/symphony-familiarity/MAL-0000-ossf-package-analysis-7ed9c72eb4d27674.json deleted file mode 100644 index 5b9b5af7e..000000000 --- a/osv/malicious/npm/symphony-familiarity/MAL-0000-ossf-package-analysis-7ed9c72eb4d27674.json +++ /dev/null @@ -1,42 +0,0 @@ -{ - "modified": "2024-12-25T16:05:46Z", - "published": "2024-12-25T16:05:46Z", - "schema_version": "1.5.0", - "id": "", - "summary": "Malicious code in symphony-familiarity (npm)", - "details": "The OpenSSF Package Analysis project identified 'symphony-familiarity' @ 1.0.4 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n", - "affected": [ - { - "package": { - "ecosystem": "npm", - "name": "symphony-familiarity" - }, - "versions": [ - "1.0.4" - ] - } - ], - "credits": [ - { - "name": "OpenSSF: Package Analysis", - "type": "FINDER", - "contact": [ - "https://github.com/ossf/package-analysis", - "https://openssf.slack.com/channels/package_analysis" - ] - } - ], - "database_specific": { - "malicious-packages-origins": [ - { - "source": "ossf-package-analysis", - "sha256": "7ed9c72eb4d276746405fc680156ec54b3143e8099bec54d815482e93c48debb", - "import_time": "2024-12-25T16:06:02.877266729Z", - "modified_time": "2024-12-25T16:05:46Z", - "versions": [ - "1.0.4" - ] - } - ] - } -} diff --git a/osv/malicious/npm/symphony-familiarity/MAL-2024-7830.json b/osv/malicious/npm/symphony-familiarity/MAL-2024-7830.json index 347bcedac..cd6b0b80b 100644 --- a/osv/malicious/npm/symphony-familiarity/MAL-2024-7830.json +++ b/osv/malicious/npm/symphony-familiarity/MAL-2024-7830.json @@ -1,5 +1,5 @@ { - "modified": "2024-07-29T02:20:13Z", + "modified": "2024-12-25T16:06:31Z", "published": "2024-07-28T05:49:05Z", "schema_version": "1.5.0", "id": "MAL-2024-7830", @@ -13,7 +13,8 @@ }, "versions": [ "9.9.9", - "9.9.11" + "9.9.11", + "1.0.4" ] } ], @@ -46,6 +47,15 @@ "versions": [ "9.9.11" ] + }, + { + "source": "ossf-package-analysis", + "sha256": "7ed9c72eb4d276746405fc680156ec54b3143e8099bec54d815482e93c48debb", + "import_time": "2024-12-25T16:06:02.877266729Z", + "modified_time": "2024-12-25T16:05:46Z", + "versions": [ + "1.0.4" + ] } ] }