Vulnerability Database
Blog
FAQ
Docs
MAL-2024-10293
See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ro.dll/MAL-2024-10293.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-10293
Published
2024-10-30T16:04:19Z
Modified
2024-10-30T16:04:19Z
Summary
Malicious code in ro.dll (npm)
Details
The package contains code to download and execute an infostealer payload.
References
Credits
Stacklok: trustypkg.dev - FINDER
https://discord.com/invite/RkzVuTp3WK
Affected packages
npm
/
ro.dll
Package
Name
ro.dll
View open source insights on deps.dev
Purl
pkg:npm/ro.dll
Affected ranges
Affected versions
1.*
1.0.0
MAL-2024-10293 - OSV