{"id":"MAL-2024-2416","summary":"Malicious code in get-current-env (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-p23r-4795-8hgf","MAL-2024-9","SNYK-JS-MSMGMONEYGETCURRENTENV-6141149"],"modified":"2024-10-24T01:26:49.682431Z","published":"2024-06-25T12:21:18Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","versions":["99.99.99"],"id":"RLMA-2024-01076","import_time":"2024-06-28T02:43:22.282965831Z","modified_time":"2024-06-25T12:44:09Z","sha256":"05362eee15ea29ec4db518cd1c02dedfad483bab65f97c84d5695613ac1d3455"},{"id":"RLUA-2024-06629","import_time":"2024-10-24T00:57:52.725083741Z","modified_time":"2024-10-16T12:54:32Z","sha256":"76d5b806cc377f7f2c154e78ff51b7704dcd7c1cff7c82dbe4ab154901951d7a","source":"reversing-labs"}]},"references":[{"type":"ADVISORY","url":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/%40msmg-money/get-current-env/MAL-2024-9.json"},{"type":"PACKAGE","url":"https://npmjs.com/package/@msmg-money/get-current-env"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-MSMGMONEYGETCURRENTENV-6141149"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-p23r-4795-8hgf"}],"affected":[{"package":{"name":"get-current-env","ecosystem":"npm","purl":"pkg:npm/get-current-env"},"versions":["99.99.99"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/get-current-env/MAL-2024-2416.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}