MAL-2024-3805

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/use-sync-external-store-shim/MAL-2024-3805.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-3805
Aliases
  • SNYK-JS-USESYNCEXTERNALSTORESHIM-3336025
Published
2024-06-25T13:18:35Z
Modified
2024-10-24T01:01:57Z
Summary
Malicious code in use-sync-external-store-shim (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-06-28T02:46:20.74450099Z",
            "versions": [
                "1.0.1",
                "1.0.0"
            ],
            "source": "reversing-labs",
            "id": "RLMA-2024-02572",
            "modified_time": "2024-06-25T13:18:35Z",
            "sha256": "f0c71d53d633e94fd5f966738574d48e2b3fd017f33d68094e443b4258079065"
        },
        {
            "import_time": "2024-10-24T00:58:30.524260813Z",
            "source": "reversing-labs",
            "id": "RLUA-2024-07514",
            "modified_time": "2024-10-16T13:41:07Z",
            "sha256": "e564acfcf749713592d686ed750e2674dd9269fca9706eb7bb10642b93e5afc0"
        }
    ]
}
References
Credits

Affected packages

npm / use-sync-external-store-shim

Package

Name
use-sync-external-store-shim
View open source insights on deps.dev
Purl
pkg:npm/use-sync-external-store-shim

Affected ranges

Affected versions

1.*
1.0.0
1.0.1

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/use-sync-external-store-shim/MAL-2024-3805.json"