MAL-2024-2421

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/github-artifact-exporter-core/MAL-2024-2421.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2421

Published

2024-06-25T12:44:19Z

Modified

2024-10-24T01:01:56Z

Summary

Malicious code in github-artifact-exporter-core (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-01081",
            "sha256": "d8b85442dbc01c0086bb8dfc40e7d004c01d43a35cde6251e87c0f6898054768",
            "modified_time": "2024-06-25T12:44:19Z",
            "import_time": "2024-06-28T02:43:22.819645237Z",
            "versions": [
                "3.0.0",
                "2.0.0",
                "3.0.1"
            ],
            "source": "reversing-labs"
        },
        {
            "id": "RLUA-2024-06635",
            "sha256": "bd76154e5d1dd51e32e5050612a02047114ff9b4b65903337fcccfbec0fb3468",
            "modified_time": "2024-10-16T12:54:39Z",
            "import_time": "2024-10-24T00:57:53.0525867Z",
            "source": "reversing-labs"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / github-artifact-exporter-core

Package

Name: github-artifact-exporter-core; View open source insights on deps.dev
Purl: pkg:npm/github-artifact-exporter-core

Affected ranges

Affected versions

2.*

2.0.0

3.*

3.0.0

3.0.1

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/github-artifact-exporter-core/MAL-2024-2421.json"