MAL-2024-9460

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sling-sdk/MAL-2024-9460.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2024-9460
Published
2024-10-23T05:09:43Z
Modified
2024-12-17T07:07:44Z
Summary
Malicious code in sling-sdk (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1)

The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2024-10-23T05:36:18.927496632Z",
            "sha256": "d1cf603c8e79305a2680e8dcbf4424709b888ef5b8cc0ce9648e051b154ad58f",
            "source": "ossf-package-analysis",
            "modified_time": "2024-10-23T05:09:43Z",
            "versions": [
                "2.0.0"
            ]
        },
        {
            "import_time": "2024-10-23T06:07:05.348655603Z",
            "sha256": "451ade87c52cb59fd828c7286f33460dc3ac4bb2857c38c4f6459fe1b1f729c7",
            "source": "ossf-package-analysis",
            "modified_time": "2024-10-23T05:47:15Z",
            "versions": [
                "2.0.1"
            ]
        },
        {
            "import_time": "2024-12-17T07:06:10.098565623Z",
            "sha256": "71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1",
            "source": "ossf-package-analysis",
            "modified_time": "2024-12-17T06:50:05Z",
            "versions": [
                "9.8.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / sling-sdk

Package

Name
sling-sdk
View open source insights on deps.dev
Purl
pkg:npm/sling-sdk

Affected ranges

Affected versions

2.*
2.0.0
2.0.1
9.*
9.8.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sling-sdk/MAL-2024-9460.json"