MAL-2024-2929

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/react/MAL-2024-2929.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2929

Withdrawn

2024-07-01T03:32:00Z

Published

2024-06-25T12:22:49Z

Modified

2024-07-01T03:32:00Z

Summary

Malicious code in react (npm)

Details

False positive caused by problematic ingestion.

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-00246",
            "import_time": "2024-06-28T02:41:42.052281976Z",
            "modified_time": "2024-06-25T12:23:34Z",
            "sha256": "26ef66724cef368fbb08398ce3081de51a6a9e5cdc73d89960bf7b5e87e112fd",
            "source": "reversing-labs",
            "versions": [
                "35.0.0"
            ]
        },
        {
            "id": "RLMA-2024-00211",
            "import_time": "2024-06-28T02:41:37.880737974Z",
            "modified_time": "2024-06-25T12:22:49Z",
            "sha256": "53659486b363a8f071b167a1385a89e54c30f3ecf091503b81b642b7cafe4239",
            "source": "reversing-labs",
            "versions": [
                "1.0.0"
            ]
        }
    ]
}

Affected packages

npm / react

Package

Name: react; View open source insights on deps.dev
Purl: pkg:npm/react

Affected ranges

Affected versions

1.*

1.0.0

35.*

35.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/react/MAL-2024-2929.json"