MAL-2024-2543

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jewel-case/MAL-2024-2543.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-2543
Published
2024-06-25T12:47:34Z
Modified
2025-08-29T06:43:16Z
Summary
Malicious code in jewel-case (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2024-06-25T12:47:34Z",
            "id": "RLMA-2024-01221",
            "versions": [
                "2.0.0",
                "1.0.1",
                "1.1.1",
                "1.0.0"
            ],
            "import_time": "2024-06-28T02:43:40.334309896Z",
            "sha256": "43fa9816ebfdf8cb08f0b8565f163e104a922ecda7ad9c127a1e627556e63a26",
            "source": "reversing-labs"
        },
        {
            "modified_time": "2024-10-16T12:59:22Z",
            "id": "RLUA-2024-06764",
            "sha256": "da3ef83cf3e971f14f33869abaa5c5d85650c48d42ccd81bc7dcc6707f10226e",
            "import_time": "2024-10-24T00:57:58.969781631Z",
            "source": "reversing-labs"
        },
        {
            "modified_time": "2025-06-18T10:31:55Z",
            "id": "RLUA-2025-03277",
            "versions": [
                "99.99.99"
            ],
            "import_time": "2025-06-18T15:06:51.287294315Z",
            "sha256": "075103b3ddd5169720883258ba6f1cf91af6e76754131163836fc9c1b0f9823b",
            "source": "reversing-labs"
        },
        {
            "modified_time": "2025-08-28T07:31:44Z",
            "id": "RLUA-2025-04573",
            "versions": [
                "16.0.0"
            ],
            "import_time": "2025-08-29T06:42:47.660988969Z",
            "sha256": "7c2b2d24f4aeb46f7db4da7a6f21c816a6b596fa5230f05bcf73584e51125ceb",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / jewel-case

Package

Name
jewel-case
View open source insights on deps.dev
Purl
pkg:npm/jewel-case

Affected ranges

Affected versions

1.*

1.0.0
1.0.1
1.1.1

2.*

2.0.0

16.*

16.0.0

99.*

99.99.99