MAL-2024-2939

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@plangrid-private/react-scripts/MAL-2024-2939.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-2939

Published

2024-06-25T12:21:54Z

Modified

2024-10-24T01:01:55Z

Summary

Malicious code in @plangrid-private/react-scripts (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-00172",
            "import_time": "2024-06-28T02:41:33.184529514Z",
            "modified_time": "2024-06-25T12:21:54Z",
            "sha256": "cf9b1a9ba7113e1cbd9349fc8e57d558fc04ce03994c582e1d8a50dda207decd",
            "source": "reversing-labs",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "RLUA-2024-06013",
            "import_time": "2024-10-24T00:57:24.806459405Z",
            "modified_time": "2024-10-16T12:24:25Z",
            "sha256": "12d01ece9b6c737d0d3e9b47d3a9f3fd5d6ea4c26db9340a322faa6c78144f19",
            "source": "reversing-labs"
        },
        {
            "id": "RLMA-2024-00172",
            "import_time": "2024-10-24T00:49:24.919284006Z",
            "modified_time": "2024-06-25T12:21:54Z",
            "sha256": "2143a246ad8465a46338415788f002e0f6e2c4474b35d2eb1d08352cbb6a954d",
            "source": "reversing-labs",
            "versions": [
                "1.0.0"
            ]
        }
    ]
}

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / @plangrid-private/react-scripts

Package

Name: @plangrid-private/react-scripts; View open source insights on deps.dev
Purl: pkg:npm/%40plangrid-private/react-scripts

Affected ranges

Affected versions

1.*

1.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@plangrid-private/react-scripts/MAL-2024-2939.json"