MAL-2026-7246

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cli-pretty-logger/MAL-2026-7246.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-7246

Aliases

GHSA-j2hg-4jp7-x3rj

Published

2026-07-07T12:44:35Z

Modified

2026-09-01T11:31:31Z

Summary

Malicious code in cli-pretty-logger (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2026-05025",
            "import_time": "2026-07-09T09:16:25.485378642Z",
            "modified_time": "2026-07-07T12:44:35Z",
            "sha256": "cbc92054643f0316cf729be245c045b3b8bb23a06726762495762bf24b5d60a5",
            "source": "reversing-labs",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "RLUA-2026-06155",
            "import_time": "2026-09-01T11:18:00.524417144Z",
            "modified_time": "2026-08-24T16:44:42Z",
            "sha256": "a27833bde23a3b5990f843893f26458a531b96068cca8a0c0f8a6ba8fde79752",
            "source": "reversing-labs"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / cli-pretty-logger

Package

Name: cli-pretty-logger; View open source insights on deps.dev
Purl: pkg:npm/cli-pretty-logger

Affected ranges

Affected versions

1.*

1.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cli-pretty-logger/MAL-2026-7246.json"