Vulnerability Database
Blog
FAQ
Docs
MAL-2024-10285
See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/byfron/MAL-2024-10285.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-10285
Published
2024-10-30T16:04:19Z
Modified
2024-10-30T16:04:19Z
Summary
Malicious code in byfron (npm)
Details
The package contains code to download and execute an infostealer payload.
References
Credits
Stacklok: trustypkg.dev - FINDER
https://discord.com/invite/RkzVuTp3WK
Affected packages
npm
/
byfron
Package
Name
byfron
View open source insights on deps.dev
Purl
pkg:npm/byfron
Affected ranges
Affected versions
1.*
1.1.0
MAL-2024-10285 - OSV