MAL-2024-1743

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@aligntech-cw/alignerfit/MAL-2024-1743.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-1743

Aliases

GHSA-4jvv-pv44-h4cp

Published

2024-06-25T12:18:25Z

Modified

2026-09-01T11:30:40.798785599Z

Summary

Malicious code in @aligntech-cw/alignerfit (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "e1b368dcc53c2aa9898549a3e72b3da49d6f9e46bd5404f4c316df31aae35991",
            "id": "RLMA-2024-00008",
            "modified_time": "2024-06-25T12:18:25Z",
            "import_time": "2024-06-28T02:41:13.48007329Z",
            "source": "reversing-labs",
            "versions": [
                "9.999.2"
            ]
        },
        {
            "sha256": "91b7f75f0efc4a18e3af40a27e9929c80fa7471ba40392f3d647f32e3f940582",
            "id": "RLUA-2024-05859",
            "modified_time": "2024-10-16T12:20:24Z",
            "source": "reversing-labs",
            "import_time": "2024-10-24T00:57:14.188047472Z"
        },
        {
            "sha256": "e9955ee9b5414bf209e0421a1909bbc8ebc19943be39f064d7a6707768a516ef",
            "id": "RLMA-2024-00008",
            "modified_time": "2024-06-25T12:18:25Z",
            "import_time": "2024-10-24T00:49:12.096983144Z",
            "source": "reversing-labs",
            "versions": [
                "9.999.2"
            ]
        },
        {
            "sha256": "80724f4a82eb0f8777bc988a9e3fed3a9b16fdba9221adb27d42f9819938f88f",
            "id": "RLUA-2026-05803",
            "modified_time": "2026-08-24T16:17:45Z",
            "import_time": "2026-09-01T11:17:37.804414235Z",
            "source": "reversing-labs"
        }
    ]
}

References

https://github.com/advisories/GHSA-4jvv-pv44-h4cp

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / @aligntech-cw/alignerfit

Package

Name: @aligntech-cw/alignerfit; View open source insights on deps.dev
Purl: pkg:npm/%40aligntech-cw/alignerfit

Affected ranges

Affected versions

9.*

9.999.2

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@aligntech-cw/alignerfit/MAL-2024-1743.json"