MAL-2024-3080

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/tanker-branch/MAL-2024-3080.json
JSON Data
https://api.test.osv.dev/v1/vulns/MAL-2024-3080
Aliases
  • SNYK-JS-TANKERBRANCH-3326401
Published
2024-06-25T13:02:48Z
Modified
2024-10-24T01:01:57Z
Summary
Malicious code in tanker-branch (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific
{
    "malicious-packages-origins": [
        {
            "sha256": "fe3b98aeb56c7e8c3fcacf5dfdceff4c34b0ed70d6fa2847f1efc91ea079b3df",
            "import_time": "2024-06-28T02:44:53.245573393Z",
            "versions": [
                "1.3.2",
                "1.3.3",
                "0.7.1",
                "0.4.0",
                "0.4.1",
                "0.7.2"
            ],
            "id": "RLMA-2024-01823",
            "source": "reversing-labs",
            "modified_time": "2024-06-25T13:02:48Z"
        },
        {
            "sha256": "e58f6137c6e648fe1f6e6f0f89cf4242b097a96ca1a8f36160d35a1ddc555e5e",
            "import_time": "2024-10-24T00:58:24.010707005Z",
            "id": "RLUA-2024-07396",
            "source": "reversing-labs",
            "modified_time": "2024-10-16T13:22:05Z"
        }
    ]
}
References
Credits

Affected packages

npm / tanker-branch

Package

Affected ranges

Affected versions

0.*

0.4.0
0.4.1
0.7.1
0.7.2

1.*

1.3.2
1.3.3