MAL-2023-1559

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/kucoin-prices/MAL-2023-1559.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2023-1559

Published

2023-07-06T00:00:00Z

Modified

2023-08-21T20:12:58Z

Summary

Malicious code in kucoin-prices (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: checkmarx (d89308a1cad90c22ac679c64ba69b184cebb0082f7d26962c26916f94b14fe1a)

Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering tactics

Database specific

{
    "iocs": {
        "domains": [
            "cryptopriceoffer.com",
            "npmjscloud.com",
            "npmrepos.com",
            "tradingprice.net",
            "npmjsregister.com",
            "npmcloudjs.com",
            "bi2price.com",
            "npmaudit.com",
            "coingeckoprice.com"
        ]
    },
    "malicious-packages-origins": [
        {
            "import_time": "2023-08-23T13:55:32.306186744Z",
            "modified_time": "2023-08-21T20:12:58Z",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "SEMVER"
                }
            ],
            "sha256": "d89308a1cad90c22ac679c64ba69b184cebb0082f7d26962c26916f94b14fe1a",
            "source": "checkmarx"
        }
    ]
}

References

https://medium.com/checkmarx-security/lazarus-group-launches-first-open-source-supply-chain-attacks-targeting-crypto-sector-cabc626e404e

Credits

- Checkmarx - FINDER
- - supplychainsecurity@checkmarx.com
  - https://bit.ly/checkmarx-malicious-packages

Affected packages

npm / kucoin-prices

Package

Name: kucoin-prices; View open source insights on deps.dev
Purl: pkg:npm/kucoin-prices

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/kucoin-prices/MAL-2023-1559.json"