MAL-2024-2502

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/identity-web/MAL-2024-2502.json
JSON Data
https://api.test.osv.dev/v1/vulns/MAL-2024-2502
Published
2024-06-25T12:46:23Z
Modified
2025-04-28T05:47:09Z
Summary
Malicious code in identity-web (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-01169",
            "sha256": "d95b539eb403ba302c6a16a9a0d627d3869a4f21cc28993e37c7f938b77bf625",
            "modified_time": "2024-06-25T12:46:23Z",
            "import_time": "2024-06-28T02:43:33.573106717Z",
            "versions": [
                "1.3.7",
                "1.0.0"
            ],
            "source": "reversing-labs"
        },
        {
            "id": "RLUA-2024-06718",
            "sha256": "9a317521f5e8be402c9cf5ab4e4a1bb22d17ad196716d84d88db6c1052a9e823",
            "modified_time": "2024-10-16T12:57:47Z",
            "import_time": "2024-10-24T00:57:57.143023989Z",
            "source": "reversing-labs"
        },
        {
            "id": "RLUA-2025-02275",
            "sha256": "ed7ff7c4266388b4b8c1b42e387752e66500cb719b836a3198eee32d66db8662",
            "modified_time": "2025-04-23T15:52:38Z",
            "import_time": "2025-04-25T09:36:58.608512267Z",
            "versions": [
                "100.0.0",
                "100.0.2"
            ],
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / identity-web

Package

Name
identity-web
View open source insights on deps.dev
Purl
pkg:npm/identity-web

Affected ranges

Affected versions

1.*

1.0.0
1.3.7

100.*

100.0.0
100.0.2