From 77a0ca7ebdcc7967dc876cca5e70a0f71e7209b0 Mon Sep 17 00:00:00 2001 From: github-actions Date: Thu, 19 Dec 2024 13:38:32 +0000 Subject: [PATCH] Assign IDs --- osv/malicious/.id-allocator | 2 +- ...analysis-e10c5fb118ea2960.json => MAL-2024-11924.json} | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) rename osv/malicious/npm/editions-dev-workshop/{MAL-0000-ossf-package-analysis-e10c5fb118ea2960.json => MAL-2024-11924.json} (68%) diff --git a/osv/malicious/.id-allocator b/osv/malicious/.id-allocator index 09e1519cce..a2904db52d 100644 --- a/osv/malicious/.id-allocator +++ b/osv/malicious/.id-allocator @@ -1 +1 @@ -e78ece04594664e0a9201589d42e5e4e88c8660d14a95da3a500f6a914f0b45c \ No newline at end of file +491aab9392d91e231c0595f6e3807a0a5dded6c171cdac9813f4fe8d89a2c83f \ No newline at end of file diff --git a/osv/malicious/npm/editions-dev-workshop/MAL-0000-ossf-package-analysis-e10c5fb118ea2960.json b/osv/malicious/npm/editions-dev-workshop/MAL-2024-11924.json similarity index 68% rename from osv/malicious/npm/editions-dev-workshop/MAL-0000-ossf-package-analysis-e10c5fb118ea2960.json rename to osv/malicious/npm/editions-dev-workshop/MAL-2024-11924.json index e956f2e125..fdfdaf7b86 100644 --- a/osv/malicious/npm/editions-dev-workshop/MAL-0000-ossf-package-analysis-e10c5fb118ea2960.json +++ b/osv/malicious/npm/editions-dev-workshop/MAL-2024-11924.json @@ -2,9 +2,9 @@ "modified": "2024-12-19T13:31:05Z", "published": "2024-12-19T13:31:05Z", "schema_version": "1.5.0", - "id": "", + "id": "MAL-2024-11924", "summary": "Malicious code in editions-dev-workshop (npm)", - "details": "The OpenSSF Package Analysis project identified 'editions-dev-workshop' @ 5.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n", + "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e10c5fb118ea2960476ee2fa51f5d3d97e5834b44b3ce58aef95d3fdf1d5a822)\nThe OpenSSF Package Analysis project identified 'editions-dev-workshop' @ 5.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n", "affected": [ { "package": { @@ -29,10 +29,10 @@ "database_specific": { "malicious-packages-origins": [ { - "source": "ossf-package-analysis", - "sha256": "e10c5fb118ea2960476ee2fa51f5d3d97e5834b44b3ce58aef95d3fdf1d5a822", "import_time": "2024-12-19T13:37:51.011645757Z", "modified_time": "2024-12-19T13:31:05Z", + "sha256": "e10c5fb118ea2960476ee2fa51f5d3d97e5834b44b3ce58aef95d3fdf1d5a822", + "source": "ossf-package-analysis", "versions": [ "5.0.0" ]