MAL-2024-2589

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/lab-npm-package/MAL-2024-2589.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-2589
Published
2024-06-25T12:48:37Z
Modified
2024-10-24T01:01:56Z
Summary
Malicious code in lab-npm-package (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific
{
    "malicious-packages-origins": [
        {
            "sha256": "132e53cf68784707828d37b3bd314419bc99fcf6c23c19dabcad40791054eeeb",
            "import_time": "2024-06-28T02:43:46.058152874Z",
            "versions": [
                "1.0.8",
                "1.0.7",
                "2.0.1",
                "3.0.0",
                "2.0.2"
            ],
            "id": "RLMA-2024-01270",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T12:48:37Z"
        },
        {
            "sha256": "24b9d6d92af5f52711cabfdd730c9b4c9e29c3c1e608588d30adc758566a444a",
            "import_time": "2024-10-24T00:58:00.991638794Z",
            "id": "RLUA-2024-06809",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T13:01:04Z"
        }
    ]
}
References
Credits

Affected packages

npm / lab-npm-package

Package

Affected ranges

Affected versions

1.*

1.0.7
1.0.8

2.*

2.0.1
2.0.2

3.*

3.0.0