{"id":"MAL-2024-2570","summary":"Malicious code in jquerydownloadnew (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","modified":"2024-10-24T01:01:56Z","published":"2024-06-25T12:48:07Z","database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","versions":["1.0.1"],"id":"RLMA-2024-01249","import_time":"2024-06-28T02:43:43.616585471Z","modified_time":"2024-06-25T12:48:07Z","sha256":"c3fd24553039313578c8522217aca3602f71027797763baa2f1290723d8d4bce"},{"import_time":"2024-10-24T00:57:59.82199401Z","modified_time":"2024-10-16T13:00:08Z","sha256":"b385f19e942a06218ed724f22213539de23e34044975e02dc39b4fc0d7378a2c","source":"reversing-labs","id":"RLUA-2024-06779"}]},"references":[{"type":"ARTICLE","url":"https://www.reversinglabs.com/blog/operation-brainleeches-malicious-npm-packages-fuel-supply-chain-and-phishing-attacks"}],"affected":[{"package":{"name":"jquerydownloadnew","ecosystem":"npm","purl":"pkg:npm/jquerydownloadnew"},"versions":["1.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jquerydownloadnew/MAL-2024-2570.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}