MAL-2024-7775

    Dashboard / Malicious Package / MAL-2024-7775

    MAL-2024-7775

    Published: 19 Jul 2024Last Modified: 25 Jul 2024

    Summary: Malicious code in fireauth.args (npm)

    Details: The package exfiltrates data to an oastify domain. Source: ossf-package-analysis (c601f7d41a9166b7e84595a25e727e5256c0962af730ee336a07eac2b1e7fe40) The OpenSSF Package Analysis project identified 'fireauth.args' @ 71.69.69 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: fireauth.args

    Purl: pkg:npm/fireauth.args

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    69.69.69