{"id":"MAL-2024-1843","summary":"Malicious code in @expue/builder (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-EXPUEBUILDER-5920726"],"modified":"2024-10-24T01:01:55Z","published":"2024-06-25T12:19:34Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","versions":["0.0.3-alpha.0"],"id":"RLMA-2024-00061","import_time":"2024-06-28T02:41:19.987589473Z","modified_time":"2024-06-25T12:19:34Z","sha256":"7956416a73ed6511ca07d5d2166b864d31785ea6b663b074a9bd025b85fbfbf4"},{"versions":["0.0.3-alpha.0"],"id":"RLMA-2024-00061","import_time":"2024-10-24T00:49:15.832825392Z","modified_time":"2024-06-25T12:19:34Z","sha256":"993e36b1bfc147d9275742d40131c47c0b49e8d5829124bb0d18e98479a1ed11","source":"reversing-labs"},{"id":"RLUA-2024-05911","import_time":"2024-10-24T00:57:17.534898819Z","modified_time":"2024-10-16T12:21:50Z","sha256":"f60936d0961d377d94460d5278e8b6b73bb2a416e63f59b88ce58385577f3434","source":"reversing-labs"}]},"references":[{"type":"ARTICLE","url":"https://blog.phylum.io/sensitive-data-exfiltration-campaign-targets-npm-and-pypi/"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-EXPUEBUILDER-5920726"}],"affected":[{"package":{"name":"@expue/builder","ecosystem":"npm","purl":"pkg:npm/%40expue/builder"},"versions":["0.0.3-alpha.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@expue/builder/MAL-2024-1843.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}