MAL-2024-2646

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/malicious-pkg-demo/MAL-2024-2646.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2646

Published

2024-06-25T12:49:52Z

Modified

2024-10-24T01:01:56Z

Summary

Malicious code in malicious-pkg-demo (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2024-01324",
            "import_time":  "2024-06-28T02:43:53.313398363Z",
            "modified_time":  "2024-06-25T12:49:52Z",
            "sha256":  "e7a8664de70e1b57b4fb69f602a31af16244e57658c6ab584db4c19da4428f38",
            "source":  "reversing-labs",
            "versions":  [
                "1.0.0",
                "1.0.4-reverse-shell",
                "1.0.5",
                "1.0.4",
                "1.0.1",
                "1.0.2",
                "1.0.6",
                "1.0.3"
            ]
        },
        {
            "id":  "RLUA-2024-06872",
            "import_time":  "2024-10-24T00:58:04.023634584Z",
            "modified_time":  "2024-10-16T13:03:05Z",
            "sha256":  "162c6dc3cf93d13db74f64b2956650984b1f6216941a65306e8b868e82e8e3b7",
            "source":  "reversing-labs"
        }
    ]
}

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / malicious-pkg-demo

Package

Name: malicious-pkg-demo; View open source insights on deps.dev
Purl: pkg:npm/malicious-pkg-demo

Affected ranges

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4-reverse-shell

1.0.4

1.0.5

1.0.6

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/malicious-pkg-demo/MAL-2024-2646.json"