MAL-2024-1767

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@zettle-bo/apps/MAL-2024-1767.json

JSON Data

https://api.test.osv.dev/v1/vulns/MAL-2024-1767

Published

2024-06-25T12:23:18Z

Modified

2024-10-24T01:01:55Z

Summary

Malicious code in @zettle-bo/apps (npm)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-00233",
            "sha256": "7486bb39e9a6de2b5aa73d48702c41e6a1f53c3e97fe66b86da8a25fb5890063",
            "versions": [
                "35.0.0"
            ],
            "modified_time": "2024-06-25T12:23:18Z",
            "import_time": "2024-06-28T02:41:40.477758128Z",
            "source": "reversing-labs"
        },
        {
            "id": "RLMA-2024-00233",
            "sha256": "1b102441f681add1f0a0133b7d171661ad252cd2dfde17bccdc28b8146de2dcb",
            "versions": [
                "35.0.0"
            ],
            "modified_time": "2024-06-25T12:23:18Z",
            "import_time": "2024-10-24T00:49:29.325574222Z",
            "source": "reversing-labs"
        },
        {
            "id": "RLUA-2024-06091",
            "sha256": "94b30644f7fa16789f73501e6bc7f563f0e5242496a70ef2c19cc06416bee76b",
            "modified_time": "2024-10-16T12:26:42Z",
            "import_time": "2024-10-24T00:57:28.36635999Z",
            "source": "reversing-labs"
        }
    ]
}

References

https://blog.sonatype.com/new-npm-poc-packages-target-paypal-zettle-airbnb-developers

MAL-2024-1767

Affected packages

npm / @zettle-bo/apps

Package

Affected ranges

Affected versions

35.*