Vulnerability Database
Blog
FAQ
Docs
MAL-2024-10290
See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nodelement/MAL-2024-10290.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-10290
Published
2024-10-30T16:04:19Z
Modified
2024-10-30T16:04:19Z
Summary
Malicious code in nodelement (npm)
Details
The package contains code to download and execute an infostealer payload.
References
Credits
Stacklok: trustypkg.dev - FINDER
https://discord.com/invite/RkzVuTp3WK
Affected packages
npm
/
nodelement
Package
Name
nodelement
View open source insights on deps.dev
Purl
pkg:npm/nodelement
Affected ranges
Affected versions
1.*
1.0.0
MAL-2024-10290 - OSV