Assign IDs

Author: github-actions

osv/malicious/.id-allocator

@@ -1 +1 @@
-ab88da95da4607b91a0300f7dda129a4329b6cb89950ec3f1608ba2e1f1f9628
+a10973d674b25ef28fc98b61e6042fb18d9194bb4dadc7009c6bb0fe8dbf204d

osv/malicious/npm/accounts-base/MAL-0000-ossf-package-analysis-91aded18014deeb9.json renamed to osv/malicious/npm/accounts-base/MAL-2025-191480.json

@@ -2,9 +2,9 @@
   "modified": "2025-11-27T23:25:43Z",
   "published": "2025-11-27T23:25:43Z",
   "schema_version": "1.7.4",
-  "id": "",
+  "id": "MAL-2025-191480",
   "summary": "Malicious code in accounts-base (npm)",
-  "details": "The OpenSSF Package Analysis project identified 'accounts-base' @ 23.5.6 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (91aded18014deeb9f278bcd61adcdf917bad7b7e50159b48c125f453f19681cf)\nThe OpenSSF Package Analysis project identified 'accounts-base' @ 23.5.6 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
   "affected": [
     {
       "package": {
@@ -29,10 +29,10 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ossf-package-analysis",
-        "sha256": "91aded18014deeb9f278bcd61adcdf917bad7b7e50159b48c125f453f19681cf",
         "import_time": "2025-11-28T04:40:13.367968919Z",
         "modified_time": "2025-11-27T23:25:43Z",
+        "sha256": "91aded18014deeb9f278bcd61adcdf917bad7b7e50159b48c125f453f19681cf",
+        "source": "ossf-package-analysis",
         "versions": [
           "23.5.6"
         ]

osv/malicious/npm/bitcoin-main-lib/MAL-0000-ossf-package-analysis-054a38c3f0ef13d7.json

@@ -1,6 +1,6 @@
 {
-  "modified": "2025-11-27T07:25:14Z",
-  "published": "2025-11-26T12:35:56Z",
+  "modified": "2025-11-28T04:42:03Z",
+  "published": "2025-11-26T10:15:45Z",
   "schema_version": "1.7.4",
   "id": "MAL-2025-191477",
   "aliases": [
@@ -25,7 +25,13 @@
         }
       ],
       "versions": [
-        "7.1.6"
+        "7.1.6",
+        "7.1.7",
+        "7.1.8",
+        "7.1.1",
+        "7.1.4",
+        "7.1.2",
+        "7.1.0"
       ],
       "database_specific": {
         "cwes": [
@@ -81,6 +87,60 @@
             ]
           }
         ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "054a38c3f0ef13d700fd10fae31053babcfe33fa983b170d4bafca9b44164482",
+        "import_time": "2025-11-28T04:40:12.916686092Z",
+        "modified_time": "2025-11-26T12:40:43Z",
+        "versions": [
+          "7.1.7"
+        ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "0bedb99d5abf7b3e4e2dedba092a3124f7858b3153fbb135b2b85c49343d0917",
+        "import_time": "2025-11-28T04:40:13.04630766Z",
+        "modified_time": "2025-11-26T12:45:51Z",
+        "versions": [
+          "7.1.8"
+        ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "73907f05ac4fa2d28e5e012a5a05f9d502a96a44dda66872764c75208190bf8e",
+        "import_time": "2025-11-28T04:40:12.61736516Z",
+        "modified_time": "2025-11-26T11:00:41Z",
+        "versions": [
+          "7.1.1"
+        ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "b5dfcb3d7ee3ceba7d33dc7da0e380f84c69eaf12a7c31ed001038742e8bec4b",
+        "import_time": "2025-11-28T04:40:12.822453083Z",
+        "modified_time": "2025-11-26T12:16:18Z",
+        "versions": [
+          "7.1.4"
+        ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "bd46e3f440615dbe75731ac06ed22f0f1b36513dc228181c6c8a61f8352157fa",
+        "import_time": "2025-11-28T04:40:12.715303421Z",
+        "modified_time": "2025-11-26T11:11:26Z",
+        "versions": [
+          "7.1.2"
+        ]
+      },
+      {
+        "source": "ossf-package-analysis",
+        "sha256": "e897ed7e870743b446ea45a6dba531c1bc438069a626f6f5848c9a00cbc996af",
+        "import_time": "2025-11-28T04:40:12.491165284Z",
+        "modified_time": "2025-11-26T10:15:45Z",
+        "versions": [
+          "7.1.0"
+        ]
       }
     ]
   }

osv/malicious/npm/bitcoin-main-lib/MAL-0000-ossf-package-analysis-0bedb99d5abf7b3e.json

@@ -2,9 +2,9 @@
   "modified": "2025-11-26T08:44:02Z",
   "published": "2025-11-26T08:44:02Z",
   "schema_version": "1.7.4",
-  "id": "",
+  "id": "MAL-2025-191481",
   "summary": "Malicious code in br2s-ui-componentlibrary_r2 (npm)",
-  "details": "The OpenSSF Package Analysis project identified 'br2s-ui-componentlibrary_r2' @ 2.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
+  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (d6f54e2f7fa6e6ef49cf10c2c5cc36fd45a39ccae9a7216ba5cc215ca70e78da)\nThe OpenSSF Package Analysis project identified 'br2s-ui-componentlibrary_r2' @ 2.0.0 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
   "affected": [
     {
       "package": {
@@ -29,10 +29,10 @@
   "database_specific": {
     "malicious-packages-origins": [
       {
-        "source": "ossf-package-analysis",
-        "sha256": "d6f54e2f7fa6e6ef49cf10c2c5cc36fd45a39ccae9a7216ba5cc215ca70e78da",
         "import_time": "2025-11-28T04:40:12.364705645Z",
         "modified_time": "2025-11-26T08:44:02Z",
+        "sha256": "d6f54e2f7fa6e6ef49cf10c2c5cc36fd45a39ccae9a7216ba5cc215ca70e78da",
+        "source": "ossf-package-analysis",
         "versions": [
           "2.0.0"
         ]