MAL-2026-7294

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/google-tag-manager-integration-sample/MAL-2026-7294.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-7294

Aliases

GHSA-cv5w-wrj9-94ph

Published

2026-07-07T12:53:35Z

Modified

2026-09-01T11:31:16Z

Summary

Malicious code in google-tag-manager-integration-sample (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2026-05105",
            "import_time":  "2026-07-09T09:16:33.425758867Z",
            "modified_time":  "2026-07-07T12:53:35Z",
            "sha256":  "11dae8637821566f44d3757c01c8efa9c0c6f59a19003c7e82706f3fa3b75644",
            "source":  "reversing-labs",
            "versions":  [
                "99.9.9",
                "100.0.0"
            ]
        },
        {
            "id":  "RLUA-2026-06265",
            "import_time":  "2026-09-01T11:18:08.06804294Z",
            "modified_time":  "2026-08-24T16:53:44Z",
            "sha256":  "fb6a2a42d75e8d9e1b3097a7e1157b090e98a28476692bc4e4b6c6ae5a149ee3",
            "source":  "reversing-labs"
        }
    ]
}

References

https://github.com/advisories/GHSA-cv5w-wrj9-94ph

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

npm / google-tag-manager-integration-sample

Package

Name: google-tag-manager-integration-sample; View open source insights on deps.dev
Purl: pkg:npm/google-tag-manager-integration-sample

Affected ranges

Affected versions

99.*

99.9.9

100.*

100.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/google-tag-manager-integration-sample/MAL-2026-7294.json"