Assign IDs

ossf · Dec 23, 2024 · a1f4339 · a1f4339
1 parent 06baa4a
commit a1f4339
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 47 deletions.
diff --git a/osv/malicious/npm/opsgeniewebhook/MAL-0000-ossf-package-analysis-0dc93394cd3dab86.json b/osv/malicious/npm/opsgeniewebhook/MAL-0000-ossf-package-analysis-0dc93394cd3dab86.json
diff --git a/osv/malicious/npm/opsgeniewebhook/MAL-2024-12099.json b/osv/malicious/npm/opsgeniewebhook/MAL-2024-12099.json
@@ -1,18 +1,19 @@
 {
-  "modified": "2024-12-23T06:43:34Z",
+  "modified": "2024-12-23T13:36:16Z",
   "published": "2024-12-23T06:43:34Z",
   "schema_version": "1.5.0",
   "id": "MAL-2024-12099",
   "summary": "Malicious code in opsgeniewebhook (npm)",
-  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e197839b7edad76227261c78d3e2ab9b211801215f4a8cfaa1512b743ecdf426)\nThe OpenSSF Package Analysis project identified 'opsgeniewebhook' @ 9.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (0dc93394cd3dab86dbe9f446575ab0d09e72fb1db64dd599bbd092fb8162030d)\nThe OpenSSF Package Analysis project identified 'opsgeniewebhook' @ 99.9.9 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
   "affected": [
     {
       "package": {
         "ecosystem": "npm",
         "name": "opsgeniewebhook"
       },
       "versions": [
-        "9.9.9"
+        "9.9.9",
+        "99.9.9"
       ]
     }
   ],
@@ -29,13 +30,22 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
+        "source": "ossf-package-analysis",
+        "sha256": "e197839b7edad76227261c78d3e2ab9b211801215f4a8cfaa1512b743ecdf426",
         "import_time": "2024-12-23T07:06:08.696785167Z",
         "modified_time": "2024-12-23T06:43:34Z",
-        "sha256": "e197839b7edad76227261c78d3e2ab9b211801215f4a8cfaa1512b743ecdf426",
-        "source": "ossf-package-analysis",
         "versions": [
           "9.9.9"
         ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "0dc93394cd3dab86dbe9f446575ab0d09e72fb1db64dd599bbd092fb8162030d",
+        "import_time": "2024-12-23T13:35:49.82141238Z",
+        "modified_time": "2024-12-23T13:30:55Z",
+        "versions": [
+          "99.9.9"
+        ]
       }
     ]
   }