{"id":"MAL-2024-1969","summary":"Malicious code in cdnpjs (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:55Z","published":"2024-06-25T12:32:52Z","database_specific":{"malicious-packages-origins":[{"versions":["4.5.0","4.5.8"],"source":"reversing-labs","sha256":"2627be0cbb58a78903e648158a33d2b26473106a94a7fb735721c8d93d984f4e","import_time":"2024-06-28T02:42:21.082536642Z","id":"RLMA-2024-00565","modified_time":"2024-06-25T12:32:52Z"},{"modified_time":"2024-10-16T12:39:19Z","source":"reversing-labs","sha256":"ace20ce52eaa0ebe7e78549016ba9b13e39be1c2f5b6ad9d555cdd06ab25ac68","import_time":"2024-10-24T00:57:38.294571325Z","id":"RLUA-2024-06285"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/iconburst-npm-software-supply-chain-attack-grabs-data-from-apps-websites"}],"affected":[{"package":{"name":"cdnpjs","ecosystem":"npm","purl":"pkg:npm/cdnpjs"},"versions":["4.5.0","4.5.8"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cdnpjs/MAL-2024-1969.json"}}],"schema_version":"1.9.0","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}