MAL-2024-1199

    Dashboard / Malicious Package / MAL-2024-1199

    MAL-2024-1199

    Published: 31 Mar 2024Last Modified: 31 Mar 2024

    Summary: Malicious code in bugsnagmw (npm)

    Details: The package `bugsnagmw` (npm) version 1.0.3 contains malicious code. The code was obfuscated to avoid detection. The malicious code is designed to steal sensitive information from the user's environment and send it to a remote server. See https://stacklok.com/blog/analysis-of-an-obfuscated-code-attack-on-npms-package-registry for more details.

    References:

    Affected packages

    Package

    Name: bugsnagmw

    Purl: pkg:npm/bugsnagmw

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    1.0.1
    1.0.2
    1.0.3
    MAL-2024-1199 | CVE-DB