diff --git a/osv/malicious/.id-allocator b/osv/malicious/.id-allocator index 01b0047a9..f1b280807 100644 --- a/osv/malicious/.id-allocator +++ b/osv/malicious/.id-allocator @@ -1 +1 @@ -fe3d31267a49e0118f076734268e71e1611491ce44154c6557fbb84a7316e4a4 \ No newline at end of file +87272a8bfe6be237afd8643a7ba839317f7af760bcbbbc85ee1c2878547dc4e6 \ No newline at end of file diff --git a/osv/malicious/npm/lerna-monorepo2/MAL-0000-ossf-package-analysis-e474e9abebf06f8d.json b/osv/malicious/npm/lerna-monorepo2/MAL-2024-12083.json similarity index 65% rename from osv/malicious/npm/lerna-monorepo2/MAL-0000-ossf-package-analysis-e474e9abebf06f8d.json rename to osv/malicious/npm/lerna-monorepo2/MAL-2024-12083.json index 3ea176c8d..d881d27dc 100644 --- a/osv/malicious/npm/lerna-monorepo2/MAL-0000-ossf-package-analysis-e474e9abebf06f8d.json +++ b/osv/malicious/npm/lerna-monorepo2/MAL-2024-12083.json @@ -2,9 +2,9 @@ "modified": "2024-12-21T04:45:44Z", "published": "2024-12-21T04:45:44Z", "schema_version": "1.5.0", - "id": "", + "id": "MAL-2024-12083", "summary": "Malicious code in lerna-monorepo2 (npm)", - "details": "The OpenSSF Package Analysis project identified 'lerna-monorepo2' @ 9.9.10 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n", + "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e474e9abebf06f8db38fa9d817977582d4afb15e4028b15b060b7cb6b0ddd3a3)\nThe OpenSSF Package Analysis project identified 'lerna-monorepo2' @ 9.9.10 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n", "affected": [ { "package": { @@ -29,10 +29,10 @@ "database_specific": { "malicious-packages-origins": [ { - "source": "ossf-package-analysis", - "sha256": "e474e9abebf06f8db38fa9d817977582d4afb15e4028b15b060b7cb6b0ddd3a3", "import_time": "2024-12-21T05:05:17.935648512Z", "modified_time": "2024-12-21T04:45:44Z", + "sha256": "e474e9abebf06f8db38fa9d817977582d4afb15e4028b15b060b7cb6b0ddd3a3", + "source": "ossf-package-analysis", "versions": [ "9.9.10" ]