MAL-2024-11814

    Dashboard / Malicious Package / MAL-2024-11814

    MAL-2024-11814

    Published: 6 Dec 2024Last Modified: 16 Dec 2024

    Summary: Malicious code in @tradm/my_package_legit (npm)

    Details: Source: ossf-package-analysis (29cce75017efa5cb89df0d22884f39b9d70b835108800ea9b64b10f295f11eb7) The OpenSSF Package Analysis project identified '@tradm/my_package_legit' @ 1.9.24 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: @tradm/my_package_legit

    Purl: pkg:npm/%40tradm/my_package_legit

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.9.24
    1.9.25
    1.9.20
    1.9.27
    1.9.21
    1.9.0
    1.9.1
    1.9.4
    1.9.18
    1.9.8
    1.9.7
    1.9.3
    MAL-2024-11814 | CVE-DB