{"id":"MAL-2024-2077","summary":"Malicious code in dependabot-updater-action (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:56Z","published":"2024-06-25T12:35:36Z","database_specific":{"malicious-packages-origins":[{"sha256":"736abe30487c53a9e37293480ba6c81250e8de69919a70a1d6cc929bea524f01","source":"reversing-labs","versions":["2.99.99"],"id":"RLMA-2024-00688","import_time":"2024-06-28T02:42:35.459464877Z","modified_time":"2024-06-25T12:35:36Z"},{"id":"RLUA-2024-06398","import_time":"2024-10-24T00:57:42.122001996Z","modified_time":"2024-10-16T12:43:20Z","sha256":"ebf5297ccb567a7ac55cde1cb9e06a4fd765469b365694861538b73affb76ba4","source":"reversing-labs"}]},"affected":[{"package":{"name":"dependabot-updater-action","ecosystem":"npm","purl":"pkg:npm/dependabot-updater-action"},"versions":["2.99.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/dependabot-updater-action/MAL-2024-2077.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}