MAL-2024-2370

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/financialtimes-classic/MAL-2024-2370.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-2370
Published
2024-06-25T12:43:03Z
Modified
2025-12-24T10:27:53.041353Z
Summary
Malicious code in financialtimes-classic (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.0.1"
            ],
            "import_time": "2024-06-28T02:43:16.369472307Z",
            "modified_time": "2024-06-25T12:43:03Z",
            "id": "RLMA-2024-01024",
            "sha256": "dceb6a668818328d7e60d3cf76314b98fab890e2b3ae63b505049136eacd3883",
            "source": "reversing-labs"
        },
        {
            "import_time": "2024-10-24T00:57:50.550378989Z",
            "modified_time": "2024-10-16T12:52:53Z",
            "id": "RLUA-2024-06584",
            "sha256": "2bbfc598bb0b01096cb77a72117f220c9292a5202588f3145264376df85aaef0",
            "source": "reversing-labs"
        },
        {
            "versions": [
                "1.2.0",
                "1.1.0"
            ],
            "import_time": "2025-12-24T10:07:34.759279657Z",
            "modified_time": "2025-12-23T08:13:59Z",
            "id": "RLUA-2025-06353",
            "sha256": "d7cc9d8775e5c58c2879cf99a4ca05e5c9e763e4f24c54036f923fb2bd2e0e76",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / financialtimes-classic

Package

Name
financialtimes-classic
View open source insights on deps.dev
Purl
pkg:npm/financialtimes-classic

Affected ranges

Affected versions

1.*
1.0.1
1.1.0
1.2.0

Database specific

source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/financialtimes-classic/MAL-2024-2370.json"