Ingest OSV - Cloud Storage

Author: github-actions

config/start-keys.yaml

@@ -5,7 +5,7 @@ kam193:
     pypi/packages/pentest/osv/: 0d65fa30569acb74a4cd2f6968297f9cf794b510
     pypi/packages/probably_pentest/osv/: 3c0b4471068a099c7f364abeff0bb1d3a9a3a6fd
 ossf-package-analysis:
-    confident/: confident/20260831/091413-npm-fuels-typegen-1.0.0.json
+    confident/: confident/20260831/091417-npm-generate-schema-viem-1.0.0.json
 reversing-labs:
     RLMA-: RLMA-2026-05643.json
     RLUA-: RLUA-2026-05628.json

osv/malicious/npm/evilpostinstall/MAL-0000-ossf-package-analysis-29ef31366374537c.json

@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.7.4",
+  "published": "2026-08-31T18:05:48Z",
+  "modified": "2026-08-31T18:05:48Z",
+  "summary": "Malicious code in evilpostinstall (npm)",
+  "details": "The OpenSSF Package Analysis project identified 'evilpostinstall' @ 0.2.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "affected": [
+    {
+      "package": {
+        "name": "evilpostinstall",
+        "ecosystem": "npm"
+      },
+      "versions": [
+        "0.2.0"
+      ]
+    }
+  ],
+  "database_specific": {
+    "malicious-packages-origins": [
+      {
+        "import_time": "2026-09-01T00:57:09.116943582Z",
+        "modified_time": "2026-08-31T18:05:48Z",
+        "sha256": "29ef31366374537cb5c06da575916f1a0a0494e63df3ce4ea9d06a685f4f3bb1",
+        "source": "ossf-package-analysis",
+        "versions": [
+          "0.2.0"
+        ]
+      }
+    ]
+  },
+  "credits": [
+    {
+      "name": "OpenSSF: Package Analysis",
+      "contact": [
+        "https://github.com/ossf/package-analysis",
+        "https://openssf.slack.com/channels/package_analysis"
+      ],
+      "type": "FINDER"
+    }
+  ]
+}

osv/malicious/npm/evilpostinstall/MAL-0000-ossf-package-analysis-63c1e371381b8007.json

@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.7.4",
+  "published": "2026-08-31T18:25:54Z",
+  "modified": "2026-08-31T18:25:54Z",
+  "summary": "Malicious code in evilpostinstall (npm)",
+  "details": "The OpenSSF Package Analysis project identified 'evilpostinstall' @ 0.6.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "affected": [
+    {
+      "package": {
+        "name": "evilpostinstall",
+        "ecosystem": "npm"
+      },
+      "versions": [
+        "0.6.0"
+      ]
+    }
+  ],
+  "database_specific": {
+    "malicious-packages-origins": [
+      {
+        "import_time": "2026-09-01T00:57:09.187843174Z",
+        "modified_time": "2026-08-31T18:25:54Z",
+        "sha256": "63c1e371381b8007f9f6c3347d20061d0d2e4d391ad366c6478c153056f49e32",
+        "source": "ossf-package-analysis",
+        "versions": [
+          "0.6.0"
+        ]
+      }
+    ]
+  },
+  "credits": [
+    {
+      "name": "OpenSSF: Package Analysis",
+      "contact": [
+        "https://github.com/ossf/package-analysis",
+        "https://openssf.slack.com/channels/package_analysis"
+      ],
+      "type": "FINDER"
+    }
+  ]
+}

osv/malicious/npm/evilpostinstall/MAL-0000-ossf-package-analysis-c4f0004a363677a7.json

@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.7.4",
+  "published": "2026-08-31T15:40:53Z",
+  "modified": "2026-08-31T15:40:53Z",
+  "summary": "Malicious code in evilpostinstall (npm)",
+  "details": "The OpenSSF Package Analysis project identified 'evilpostinstall' @ 4127000.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "affected": [
+    {
+      "package": {
+        "name": "evilpostinstall",
+        "ecosystem": "npm"
+      },
+      "versions": [
+        "4127000.0.1"
+      ]
+    }
+  ],
+  "database_specific": {
+    "malicious-packages-origins": [
+      {
+        "import_time": "2026-09-01T00:57:09.042147024Z",
+        "modified_time": "2026-08-31T15:40:53Z",
+        "sha256": "c4f0004a363677a7dc0429c4cf4bacafcd3bbdab0c95e1e7851d44b543d7e486",
+        "source": "ossf-package-analysis",
+        "versions": [
+          "4127000.0.1"
+        ]
+      }
+    ]
+  },
+  "credits": [
+    {
+      "name": "OpenSSF: Package Analysis",
+      "contact": [
+        "https://github.com/ossf/package-analysis",
+        "https://openssf.slack.com/channels/package_analysis"
+      ],
+      "type": "FINDER"
+    }
+  ]
+}