MAL-2024-2107

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/djs-fetchers-v14/MAL-2024-2107.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2107

Published

2024-06-25T12:36:55Z

Modified

2024-10-24T01:01:56Z

Summary

Malicious code in djs-fetchers-v14 (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:42:41.988842542Z",
            "modified_time": "2024-06-25T12:36:55Z",
            "sha256": "6aa27c13723cfe21af5a8cef5308df639a0313b7c8502167903b1af9bca24961",
            "source": "reversing-labs",
            "id": "RLMA-2024-00743",
            "versions": [
                "1.10.5",
                "1.10.6"
            ]
        },
        {
            "import_time": "2024-10-24T00:57:44.014510832Z",
            "modified_time": "2024-10-16T12:44:34Z",
            "sha256": "2bb0c24526ab38f2fd7422fdd72ab2d23057d2ed339a058c5def9a2c745d0491",
            "source": "reversing-labs",
            "id": "RLUA-2024-06432"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / djs-fetchers-v14

Package

Name: djs-fetchers-v14; View open source insights on deps.dev
Purl: pkg:npm/djs-fetchers-v14

Affected ranges

Affected versions

1.*

1.10.5

1.10.6

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/djs-fetchers-v14/MAL-2024-2107.json"