MAL-2024-1555

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/rey-vue-common/MAL-2024-1555.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-1555
Published
2024-06-08T11:20:38Z
Modified
2024-06-08T11:33:45Z
Summary
Malicious code in rey-vue-common (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328)

The OpenSSF Package Analysis project identified 'rey-vue-common' @ 19.1.2 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-08T11:33:23.576647326Z",
            "sha256": "247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328",
            "source": "ossf-package-analysis",
            "modified_time": "2024-06-08T11:24:58Z",
            "versions": [
                "19.1.2"
            ]
        },
        {
            "import_time": "2024-06-08T11:33:23.678106455Z",
            "sha256": "3c0a980671f64528891566a3405ce9f0d2694f8509f9052a3a7fca5f74cb5479",
            "source": "ossf-package-analysis",
            "modified_time": "2024-06-08T11:25:49Z",
            "versions": [
                "19.1.4"
            ]
        },
        {
            "import_time": "2024-06-08T11:33:23.487617106Z",
            "sha256": "8f4dd2da4488d14ce6b386a6715a0167e3ad2e1b4473aaa0331b4b967f22aaf5",
            "source": "ossf-package-analysis",
            "modified_time": "2024-06-08T11:20:38Z",
            "versions": [
                "19.1.1"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / rey-vue-common

Package

Name
rey-vue-common
View open source insights on deps.dev
Purl
pkg:npm/rey-vue-common

Affected ranges

Affected versions

19.*
19.1.1
19.1.2
19.1.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/rey-vue-common/MAL-2024-1555.json"