MAL-2024-1785

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/avalanche_compass_scoped/MAL-2024-1785.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-1785

Published

2024-06-25T12:28:52Z

Modified

2024-10-24T01:01:55Z

Summary

Malicious code in avalanche_compass_scoped (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "46631ada37332d1455ab1557647232856530aaf6479c4cefd00f3233b794974b",
            "modified_time": "2024-06-25T12:28:52Z",
            "id": "RLMA-2024-00381",
            "versions": [
                "6.3.1"
            ],
            "import_time": "2024-06-28T02:41:58.805044005Z",
            "source": "reversing-labs"
        },
        {
            "sha256": "c230044e632ac63d1b5384e5c6abe6e7de89a30356086fc6687413046723b018",
            "modified_time": "2024-10-16T12:33:02Z",
            "id": "RLUA-2024-06183",
            "import_time": "2024-10-24T00:57:33.198190848Z",
            "source": "reversing-labs"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / avalanche_compass_scoped

Package

Name: avalanche_compass_scoped; View open source insights on deps.dev
Purl: pkg:npm/avalanche_compass_scoped

Affected ranges

Affected versions

6.*

6.3.1

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/avalanche_compass_scoped/MAL-2024-1785.json"