MAL-2024-2973

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ruamel-yaml-clib/MAL-2024-2973.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-2973
Published
2024-06-25T12:59:25Z
Modified
2024-10-24T01:01:57Z
Summary
Malicious code in ruamel-yaml-clib (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-01700",
            "import_time": "2024-06-28T02:44:39.037676455Z",
            "sha256": "12ebf0fd06d706053d81175cd1b294dd8ce108a9d8558534d26b9a2eca405f78",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T12:59:25Z",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "RLUA-2024-07231",
            "import_time": "2024-10-24T00:58:18.703186937Z",
            "sha256": "83e6f45e14991d5503b06eb9f9c7cb3b7d1e8c9f73f9111e406ca7d1f782af5c",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T13:16:43Z"
        }
    ]
}
References
Credits

Affected packages

npm / ruamel-yaml-clib

Package

Name
ruamel-yaml-clib
View open source insights on deps.dev
Purl
pkg:npm/ruamel-yaml-clib

Affected ranges

Affected versions

1.*
1.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ruamel-yaml-clib/MAL-2024-2973.json"