MAL-2023-8029

    Dashboard / Malicious Package / MAL-2023-8029

    MAL-2023-8029

    Published: 27 Jul 2023Last Modified: 28 Jun 2024Aliases: 
    SNYK-JS-KIWIVICIOUS-5876614

    Summary: Malicious code in kiwi_vicious (npm)

    Details: Source: checkmarx (24d3a7f0211bfcde4618961d390577b0a47d7aab36c363af84243b2427fc1c51) Malicious packages campaign since 2021 targeting developers, steals source code and secrets

    References: https://medium.com/checkmarx-security/an-ongoing-open-source-attack-reveals-roots-dating-back-to-2021-4a511979fd98, https://security.snyk.io/vuln/SNYK-JS-KIWIVICIOUS-5876614

    Affected packages

    Package

    Name: kiwi_vicious

    Purl: pkg:npm/kiwi_vicious

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1.999.1
    MAL-2023-8029 | CVE-DB