MAL-2024-3076

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/system-info-sender/MAL-2024-3076.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2024-3076

Published

2024-06-25T13:02:42Z

Modified

2024-10-24T01:01:57Z

Summary

Malicious code in system-info-sender (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:44:53.049239049Z",
            "versions": [
                "2.0.3",
                "2.0.0",
                "1.0.0"
            ],
            "source": "reversing-labs",
            "id": "RLMA-2024-01821",
            "modified_time": "2024-06-25T13:02:42Z",
            "sha256": "67c6e839a0838f255a149c06bdb604b40acb65c8ae8ebff48e138155da2cef39"
        },
        {
            "import_time": "2024-10-24T00:58:23.899019356Z",
            "source": "reversing-labs",
            "id": "RLUA-2024-07394",
            "modified_time": "2024-10-16T13:21:57Z",
            "sha256": "4ec1f9f3b1c3521e6e4dd70d1c731a009e8fb7e99d83ba0bbb78010427c175e3"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / system-info-sender

Package

Name: system-info-sender; View open source insights on deps.dev
Purl: pkg:npm/system-info-sender

Affected ranges

Affected versions

1.*

1.0.0

2.*

2.0.0

2.0.3

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/system-info-sender/MAL-2024-3076.json"