MAL-2024-2068

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/delivery-promise/MAL-2024-2068.json
JSON Data
https://api.test.osv.dev/v1/vulns/MAL-2024-2068
Aliases
  • SNYK-JS-DELIVERYPROMISE-5666413
Published
2024-06-25T12:35:23Z
Modified
2024-10-24T01:01:55Z
Summary
Malicious code in delivery-promise (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "52ada841bd867d9cf30d400a3d67c05f3d77029f196aac4d5f7c6079bfc73f9f",
            "import_time": "2024-06-28T02:42:34.463556409Z",
            "versions": [
                "66.6.6",
                "6.6.6"
            ],
            "id": "RLMA-2024-00680",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T12:35:23Z"
        },
        {
            "sha256": "3ffc0b9510d681533c2d64e35e103784f6bd2e688eb752a230cb0b838d0790bd",
            "import_time": "2024-10-24T00:57:41.794552338Z",
            "id": "RLUA-2024-06391",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T12:43:03Z"
        }
    ]
}
References
Credits

Affected packages

npm / delivery-promise

Package

Name
delivery-promise
View open source insights on deps.dev
Purl
pkg:npm/delivery-promise

Affected ranges

Affected versions

6.*

6.6.6

66.*

66.6.6