Assign IDs

Author: github-actions

osv/malicious/.id-allocator

@@ -1 +1 @@
-26a2261841e0673784f5b0fa1366d258b64ff1eff272ee2898badd21cb44a752
+2a112d2e60199691f667f14901cfaca8848561ca4562fcef231c2b0cad7f180f

osv/malicious/npm/nintendoamerica-ncom/MAL-0000-ossf-package-analysis-e77b311f9b7e9e93.json

@@ -1,18 +1,19 @@
 {
-  "modified": "2026-03-21T05:40:41Z",
+  "modified": "2026-03-21T10:10:54Z",
   "published": "2026-03-21T05:40:41Z",
   "schema_version": "1.7.4",
   "id": "MAL-2026-2008",
   "summary": "Malicious code in nintendoamerica-ncom (npm)",
-  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (7b638ac33d4412bfc3c7d3bc1d5f935f1966b743badfe353e134ff907d3e1b8f)\nThe OpenSSF Package Analysis project identified 'nintendoamerica-ncom' @ 1.0.5 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (e77b311f9b7e9e9303cab9b4b2a926d9dd50cbd5cc8196be52e888925f36bb89)\nThe OpenSSF Package Analysis project identified 'nintendoamerica-ncom' @ 99.0.7 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
   "affected": [
     {
       "package": {
         "ecosystem": "npm",
         "name": "nintendoamerica-ncom"
       },
       "versions": [
-        "1.0.5"
+        "1.0.5",
+        "99.0.7"
       ]
     }
   ],
@@ -29,13 +30,22 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
+        "source": "ossf-package-analysis",
+        "sha256": "7b638ac33d4412bfc3c7d3bc1d5f935f1966b743badfe353e134ff907d3e1b8f",
         "import_time": "2026-03-21T05:47:19.194998093Z",
         "modified_time": "2026-03-21T05:40:41Z",
-        "sha256": "7b638ac33d4412bfc3c7d3bc1d5f935f1966b743badfe353e134ff907d3e1b8f",
-        "source": "ossf-package-analysis",
         "versions": [
           "1.0.5"
         ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "e77b311f9b7e9e9303cab9b4b2a926d9dd50cbd5cc8196be52e888925f36bb89",
+        "import_time": "2026-03-21T10:08:51.495852685Z",
+        "modified_time": "2026-03-21T10:05:44Z",
+        "versions": [
+          "99.0.7"
+        ]
       }
     ]
   }

osv/malicious/npm/nintendoamerica-ncom/MAL-2026-2008.json

@@ -1,5 +1,5 @@
 {
-  "modified": "2026-03-21T09:46:11Z",
+  "modified": "2026-03-21T10:10:56Z",
   "published": "2026-03-20T07:05:46Z",
   "schema_version": "1.7.4",
   "id": "MAL-2026-1983",
@@ -23,7 +23,8 @@
         "1.0.14",
         "1.0.15",
         "1.0.16",
-        "1.0.17"
+        "1.0.17",
+        "1.0.20"
       ]
     }
   ],
@@ -146,6 +147,15 @@
         "versions": [
           "1.0.17"
         ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "f68ed829f1cbda041340ebd648283ab5fd5ab2c539e09590a949b63f4550e0b4",
+        "import_time": "2026-03-21T10:08:51.441195517Z",
+        "modified_time": "2026-03-21T09:56:47Z",
+        "versions": [
+          "1.0.20"
+        ]
       }
     ]
   }

osv/malicious/npm/uipathisfun/MAL-0000-ossf-package-analysis-f68ed829f1cbda04.json

@@ -2,9 +2,9 @@
   "modified": "2026-03-21T09:50:35Z",
   "published": "2026-03-21T09:50:35Z",
   "schema_version": "1.7.4",
-  "id": "",
+  "id": "MAL-2026-2010",
   "summary": "Malicious code in yelp-react-component-badge (npm)",
-  "details": "The OpenSSF Package Analysis project identified 'yelp-react-component-badge' @ 99.0.4 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (8b6dade7daa9669ae0230e60fbdcca448ec07c3e0386b27e324be83e525cadca)\nThe OpenSSF Package Analysis project identified 'yelp-react-component-badge' @ 99.0.4 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n\n- The package executes one or more commands associated with malicious behavior.\n",
   "affected": [
     {
       "package": {
@@ -29,10 +29,10 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ossf-package-analysis",
-        "sha256": "8b6dade7daa9669ae0230e60fbdcca448ec07c3e0386b27e324be83e525cadca",
         "import_time": "2026-03-21T10:08:51.358143247Z",
         "modified_time": "2026-03-21T09:50:35Z",
+        "sha256": "8b6dade7daa9669ae0230e60fbdcca448ec07c3e0386b27e324be83e525cadca",
+        "source": "ossf-package-analysis",
         "versions": [
           "99.0.4"
         ]