MAL-2024-2642

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/lumberjack/MAL-2024-2642.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2642

Withdrawn

2024-07-01T05:55:00Z

Published

2024-06-25T12:23:07Z

Modified

2024-07-01T05:55:00Z

Summary

Malicious code in lumberjack (npm)

Details

False positive caused by problematic ingestion.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "sha256": "08ef58c503b3349b7d6f8b1db9d7ee13c01a42ef5055323dc460ee0fc3afdf22",
            "id": "RLMA-2024-00224",
            "import_time": "2024-06-28T02:41:39.397586968Z",
            "modified_time": "2024-06-25T12:23:07Z",
            "versions": [
                "2.634.1",
                "4.636.1",
                "1.1.0-3b2",
                "3.635.1",
                "1.633.1",
                "5.637.1",
                "7.639.1",
                "6.638.1"
            ],
            "source": "reversing-labs"
        }
    ]
}

References

Affected packages

npm / lumberjack

Package

Name: lumberjack; View open source insights on deps.dev
Purl: pkg:npm/lumberjack

Affected ranges

Affected versions

1.*

1.1.0-3b2

1.633.1

2.*

2.634.1

3.*

3.635.1

4.*

4.636.1

5.*

5.637.1

6.*

6.638.1

7.*

7.639.1

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/lumberjack/MAL-2024-2642.json"