Assign IDs

ossf · Dec 20, 2024 · 72e296b · 72e296b
1 parent 8c3b9a6
commit 72e296b
Show file tree

Hide file tree

Showing 269 changed files with 4,668 additions and 6,223 deletions.
diff --git a/osv/malicious/.id-allocator b/osv/malicious/.id-allocator
@@ -1 +1 @@
-9a0dc55d053b1b78996b3d72d529e1b6d4e7aab370036139811c46be18531d0f
+e7de0a7c98ac53b6e1705bb896576b36d8f230070d24a84482896c42fdda1230
diff --git a/...L-0000-ghsa-malware-009dc7d5e85690b3.json → ...-exchange/import-type/MAL-2024-11933.json b/...L-0000-ghsa-malware-009dc7d5e85690b3.json → ...-exchange/import-type/MAL-2024-11933.json
@@ -2,12 +2,12 @@
   "modified": "2024-12-19T13:26:14Z",
   "published": "2024-12-19T13:26:14Z",
   "schema_version": "1.5.0",
-  "id": "",
+  "id": "MAL-2024-11933",
   "aliases": [
     "GHSA-x36w-pmjx-8j76"
   ],
-  "summary": "Malware in @add-wallet-exchange/import-type",
-  "details": "Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.",
+  "summary": "Malicious code in @add-wallet-exchange/import-type (npm)",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n",
   "affected": [
     {
       "package": {
@@ -31,8 +31,7 @@
             "description": "The product contains code that appears to be malicious in nature.",
             "name": "Embedded Malicious Code"
           }
-        ],
-        "ghsa": "https://github.com/advisories/GHSA-x36w-pmjx-8j76"
+        ]
       }
     }
   ],
@@ -45,21 +44,21 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ghsa-malware",
-        "sha256": "009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a",
-        "import_time": "2024-12-20T00:32:39.528816275Z",
         "id": "GHSA-x36w-pmjx-8j76",
+        "import_time": "2024-12-20T00:32:39.528816275Z",
         "modified_time": "2024-12-19T13:26:14Z",
         "ranges": [
           {
-            "type": "SEMVER",
             "events": [
               {
                 "introduced": "0"
               }
-            ]
+            ],
+            "type": "SEMVER"
           }
-        ]
+        ],
+        "sha256": "009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a",
+        "source": "ghsa-malware"
       }
     ]
   }

diff --git a/...L-0000-ghsa-malware-eb76748dbba1a050.json → ...wallet-exchange/reset/MAL-2024-11934.json b/...L-0000-ghsa-malware-eb76748dbba1a050.json → ...wallet-exchange/reset/MAL-2024-11934.json
@@ -2,12 +2,12 @@
   "modified": "2024-12-19T13:26:14Z",
   "published": "2024-12-19T13:26:14Z",
   "schema_version": "1.5.0",
-  "id": "",
+  "id": "MAL-2024-11934",
   "aliases": [
     "GHSA-3254-x48m-vxpj"
   ],
-  "summary": "Malware in @add-wallet-exchange/reset",
-  "details": "Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.",
+  "summary": "Malicious code in @add-wallet-exchange/reset (npm)",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n",
   "affected": [
     {
       "package": {
@@ -31,8 +31,7 @@
             "description": "The product contains code that appears to be malicious in nature.",
             "name": "Embedded Malicious Code"
           }
-        ],
-        "ghsa": "https://github.com/advisories/GHSA-3254-x48m-vxpj"
+        ]
       }
     }
   ],
@@ -45,21 +44,21 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ghsa-malware",
-        "sha256": "eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3",
-        "import_time": "2024-12-20T00:32:39.369260138Z",
         "id": "GHSA-3254-x48m-vxpj",
+        "import_time": "2024-12-20T00:32:39.369260138Z",
         "modified_time": "2024-12-19T13:26:14Z",
         "ranges": [
           {
-            "type": "SEMVER",
             "events": [
               {
                 "introduced": "0"
               }
-            ]
+            ],
+            "type": "SEMVER"
           }
-        ]
+        ],
+        "sha256": "eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3",
+        "source": "ghsa-malware"
       }
     ]
   }

diff --git a/...L-0000-ghsa-malware-85e68f887715288c.json → ...-imported-csv-message/MAL-2024-11935.json b/...L-0000-ghsa-malware-85e68f887715288c.json → ...-imported-csv-message/MAL-2024-11935.json
@@ -2,12 +2,12 @@
   "modified": "2024-12-19T13:26:14Z",
   "published": "2024-12-19T13:26:14Z",
   "schema_version": "1.5.0",
-  "id": "",
+  "id": "MAL-2024-11935",
   "aliases": [
     "GHSA-8m64-h92r-p78q"
   ],
-  "summary": "Malware in @add-wallet-exchange/set-imported-csv-message",
-  "details": "Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.",
+  "summary": "Malicious code in @add-wallet-exchange/set-imported-csv-message (npm)",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (85e68f887715288c07927e0e74544a85fd8c7f1fd0ea7afe1ff8d50322fcaa34)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n",
   "affected": [
     {
       "package": {
@@ -31,8 +31,7 @@
             "description": "The product contains code that appears to be malicious in nature.",
             "name": "Embedded Malicious Code"
           }
-        ],
-        "ghsa": "https://github.com/advisories/GHSA-8m64-h92r-p78q"
+        ]
       }
     }
   ],
@@ -45,21 +44,21 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ghsa-malware",
-        "sha256": "85e68f887715288c07927e0e74544a85fd8c7f1fd0ea7afe1ff8d50322fcaa34",
-        "import_time": "2024-12-20T00:32:39.417903824Z",
         "id": "GHSA-8m64-h92r-p78q",
+        "import_time": "2024-12-20T00:32:39.417903824Z",
         "modified_time": "2024-12-19T13:26:14Z",
         "ranges": [
           {
-            "type": "SEMVER",
             "events": [
               {
                 "introduced": "0"
               }
-            ]
+            ],
+            "type": "SEMVER"
           }
-        ]
+        ],
+        "sha256": "85e68f887715288c07927e0e74544a85fd8c7f1fd0ea7afe1ff8d50322fcaa34",
+        "source": "ghsa-malware"
       }
     ]
   }

diff --git a/...L-0000-ghsa-malware-9a8805bb9462f791.json → ...xchange/type-api-data/MAL-2024-11936.json b/...L-0000-ghsa-malware-9a8805bb9462f791.json → ...xchange/type-api-data/MAL-2024-11936.json
@@ -2,12 +2,12 @@
   "modified": "2024-12-19T13:26:14Z",
   "published": "2024-12-19T13:26:14Z",
   "schema_version": "1.5.0",
-  "id": "",
+  "id": "MAL-2024-11936",
   "aliases": [
     "GHSA-x8wm-m6x9-2x8w"
   ],
-  "summary": "Malware in @add-wallet-exchange/type-api-data",
-  "details": "Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.",
+  "summary": "Malicious code in @add-wallet-exchange/type-api-data (npm)",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (9a8805bb9462f791743ade0e86d29e6c574fbdd3f67079d132694c9ac3409f0f)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n",
   "affected": [
     {
       "package": {
@@ -31,8 +31,7 @@
             "description": "The product contains code that appears to be malicious in nature.",
             "name": "Embedded Malicious Code"
           }
-        ],
-        "ghsa": "https://github.com/advisories/GHSA-x8wm-m6x9-2x8w"
+        ]
       }
     }
   ],
@@ -45,21 +44,21 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ghsa-malware",
-        "sha256": "9a8805bb9462f791743ade0e86d29e6c574fbdd3f67079d132694c9ac3409f0f",
-        "import_time": "2024-12-20T00:32:39.53166691Z",
         "id": "GHSA-x8wm-m6x9-2x8w",
+        "import_time": "2024-12-20T00:32:39.53166691Z",
         "modified_time": "2024-12-19T13:26:14Z",
         "ranges": [
           {
-            "type": "SEMVER",
             "events": [
               {
                 "introduced": "0"
               }
-            ]
+            ],
+            "type": "SEMVER"
           }
-        ]
+        ],
+        "sha256": "9a8805bb9462f791743ade0e86d29e6c574fbdd3f67079d132694c9ac3409f0f",
+        "source": "ghsa-malware"
       }
     ]
   }

diff --git a/...L-0000-ghsa-malware-4515e226dd4aafab.json → ...ics-service/mf-client/MAL-2024-11937.json b/...L-0000-ghsa-malware-4515e226dd4aafab.json → ...ics-service/mf-client/MAL-2024-11937.json
@@ -2,12 +2,12 @@
   "modified": "2024-12-19T13:33:24Z",
   "published": "2024-12-19T13:33:24Z",
   "schema_version": "1.5.0",
-  "id": "",
+  "id": "MAL-2024-11937",
   "aliases": [
     "GHSA-q66r-vc6h-289x"
   ],
-  "summary": "Malware in @metrics-service/mf-client",
-  "details": "Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.",
+  "summary": "Malicious code in @metrics-service/mf-client (npm)",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (4515e226dd4aafab225dd128f71075baadf1fc7b2176ed97b19e90ae8aadb642)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n",
   "affected": [
     {
       "package": {
@@ -31,8 +31,7 @@
             "description": "The product contains code that appears to be malicious in nature.",
             "name": "Embedded Malicious Code"
           }
-        ],
-        "ghsa": "https://github.com/advisories/GHSA-q66r-vc6h-289x"
+        ]
       }
     }
   ],
@@ -45,21 +44,21 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ghsa-malware",
-        "sha256": "4515e226dd4aafab225dd128f71075baadf1fc7b2176ed97b19e90ae8aadb642",
-        "import_time": "2024-12-20T00:32:39.493975856Z",
         "id": "GHSA-q66r-vc6h-289x",
+        "import_time": "2024-12-20T00:32:39.493975856Z",
         "modified_time": "2024-12-19T13:33:24Z",
         "ranges": [
           {
-            "type": "SEMVER",
             "events": [
               {
                 "introduced": "0"
               }
-            ]
+            ],
+            "type": "SEMVER"
           }
-        ]
+        ],
+        "sha256": "4515e226dd4aafab225dd128f71075baadf1fc7b2176ed97b19e90ae8aadb642",
+        "source": "ghsa-malware"
       }
     ]
   }

diff --git a/...L-0000-ghsa-malware-0bb03bbb0a4e31bf.json → ...s/npm/abacus-frontend/MAL-2024-11938.json b/...L-0000-ghsa-malware-0bb03bbb0a4e31bf.json → ...s/npm/abacus-frontend/MAL-2024-11938.json
@@ -2,12 +2,12 @@
   "modified": "2024-12-19T09:52:28Z",
   "published": "2024-12-19T09:52:28Z",
   "schema_version": "1.5.0",
-  "id": "",
+  "id": "MAL-2024-11938",
   "aliases": [
     "GHSA-hp83-576q-jpp2"
   ],
-  "summary": "Malware in abacus-frontend",
-  "details": "Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.",
+  "summary": "Malicious code in abacus-frontend (npm)",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n",
   "affected": [
     {
       "package": {
@@ -31,8 +31,7 @@
             "description": "The product contains code that appears to be malicious in nature.",
             "name": "Embedded Malicious Code"
           }
-        ],
-        "ghsa": "https://github.com/advisories/GHSA-hp83-576q-jpp2"
+        ]
       }
     }
   ],
@@ -45,21 +44,21 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ghsa-malware",
-        "sha256": "0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113",
-        "import_time": "2024-12-20T00:32:39.469290667Z",
         "id": "GHSA-hp83-576q-jpp2",
+        "import_time": "2024-12-20T00:32:39.469290667Z",
         "modified_time": "2024-12-19T09:52:28Z",
         "ranges": [
           {
-            "type": "SEMVER",
             "events": [
               {
                 "introduced": "0"
               }
-            ]
+            ],
+            "type": "SEMVER"
           }
-        ]
+        ],
+        "sha256": "0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113",
+        "source": "ghsa-malware"
       }
     ]
   }

diff --git a/osv/malicious/npm/acm-nano-logger-fe/MAL-0000-ghsa-malware-8669771f2fb91caa.json b/osv/malicious/npm/acm-nano-logger-fe/MAL-0000-ghsa-malware-8669771f2fb91caa.json
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		9a0dc55d053b1b78996b3d72d529e1b6d4e7aab370036139811c46be18531d0f
		e7de0a7c98ac53b6e1705bb896576b36d8f230070d24a84482896c42fdda1230