MAL-2024-2543

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jewel-case/MAL-2024-2543.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2543

Published

2024-06-25T12:47:34Z

Modified

2025-08-29T06:43:16Z

Summary

Malicious code in jewel-case (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:43:40.334309896Z",
            "modified_time": "2024-06-25T12:47:34Z",
            "source": "reversing-labs",
            "versions": [
                "2.0.0",
                "1.0.1",
                "1.1.1",
                "1.0.0"
            ],
            "sha256": "43fa9816ebfdf8cb08f0b8565f163e104a922ecda7ad9c127a1e627556e63a26",
            "id": "RLMA-2024-01221"
        },
        {
            "import_time": "2024-10-24T00:57:58.969781631Z",
            "modified_time": "2024-10-16T12:59:22Z",
            "source": "reversing-labs",
            "sha256": "da3ef83cf3e971f14f33869abaa5c5d85650c48d42ccd81bc7dcc6707f10226e",
            "id": "RLUA-2024-06764"
        },
        {
            "import_time": "2025-06-18T15:06:51.287294315Z",
            "modified_time": "2025-06-18T10:31:55Z",
            "source": "reversing-labs",
            "versions": [
                "99.99.99"
            ],
            "sha256": "075103b3ddd5169720883258ba6f1cf91af6e76754131163836fc9c1b0f9823b",
            "id": "RLUA-2025-03277"
        },
        {
            "import_time": "2025-08-29T06:42:47.660988969Z",
            "modified_time": "2025-08-28T07:31:44Z",
            "source": "reversing-labs",
            "versions": [
                "16.0.0"
            ],
            "sha256": "7c2b2d24f4aeb46f7db4da7a6f21c816a6b596fa5230f05bcf73584e51125ceb",
            "id": "RLUA-2025-04573"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / jewel-case

Package

Name: jewel-case; View open source insights on deps.dev
Purl: pkg:npm/jewel-case

Affected ranges

Affected versions

1.*

1.0.0

1.0.1

1.1.1

2.*

2.0.0

16.*

16.0.0

99.*

99.99.99

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jewel-case/MAL-2024-2543.json"