Vulnerability Database
Blog
FAQ
Docs
MAL-2024-10288
See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/inject.dll/MAL-2024-10288.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-10288
Published
2024-10-30T16:04:19Z
Modified
2024-10-30T16:04:19Z
Summary
Malicious code in inject.dll (npm)
Details
The package contains code to download and execute an infostealer payload.
References
Credits
Stacklok: trustypkg.dev - FINDER
https://discord.com/invite/RkzVuTp3WK
Affected packages
npm
/
inject.dll
Package
Name
inject.dll
View open source insights on deps.dev
Purl
pkg:npm/inject.dll
Affected ranges
Affected versions
1.*
1.0.0
MAL-2024-10288 - OSV