Ingest OSV - Cloud Storage

config/start-keys.yaml

@@ -1,2 +1,2 @@
 khulnasoft-package-analysis:
-    confident/: confident/20250218/190135-npm-elastic-buildkite-manager-2.0.0.json
+    confident/: confident/20250218/193601-npm-ing-open-banking-cli-js-4.0.1.json

osv/malicious/npm/@roku-web-ui/pills/MAL-0000-khulnasoft-package-analysis-fd61c3cd60234028.json

@@ -0,0 +1,42 @@
+{
+  "modified": "2025-02-19T19:26:03Z",
+  "published": "2025-02-19T19:26:03Z",
+  "schema_version": "1.5.0",
+  "id": "",
+  "summary": "Malicious code in @roku-web-ui/pills (npm)",
+  "details": "The OpenSSF Package Analysis project identified '@roku-web-ui/pills' @ 99.9.7 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@roku-web-ui/pills"
+      },
+      "versions": [
+        "99.9.7"
+      ]
+    }
+  ],
+  "credits": [
+    {
+      "name": "OpenSSF: Package Analysis",
+      "type": "FINDER",
+      "contact": [
+        "https://github.com/ossf/package-analysis",
+        "https://openssf.slack.com/channels/package_analysis"
+      ]
+    }
+  ],
+  "database_specific": {
+    "malicious-packages-origins": [
+      {
+        "source": "khulnasoft-package-analysis",
+        "sha256": "fd61c3cd602340285eaf5906272c43975568a2e0862652699cedf7f17c24fe53",
+        "import_time": "2025-02-19T19:38:54.223323493Z",
+        "modified_time": "2025-02-19T19:26:03Z",
+        "versions": [
+          "99.9.7"
+        ]
+      }
+    ]
+  }
+}