{"id":"MAL-2024-2634","summary":"Malicious code in lodash.findlastm (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-LODASHFINDLASTM-5406404"],"modified":"2024-10-24T01:01:56Z","published":"2024-06-25T12:49:33Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2024-01312","import_time":"2024-06-28T02:43:51.872963604Z","modified_time":"2024-06-25T12:49:33Z","sha256":"d686032996c3850e0a5d3e527d3b45b9678d0484c9f5415ee24b40d165d39759","source":"reversing-labs","versions":["4.6.0"]},{"id":"RLUA-2024-06859","import_time":"2024-10-24T00:58:03.446589388Z","modified_time":"2024-10-16T13:02:33Z","sha256":"a2b94dd79f7deeebd026b1e9a6fe3423603614648847d509a1456b85372e18cf","source":"reversing-labs"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-LODASHFINDLASTM-5406404"}],"affected":[{"package":{"name":"lodash.findlastm","ecosystem":"npm","purl":"pkg:npm/lodash.findlastm"},"versions":["4.6.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/lodash.findlastm/MAL-2024-2634.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}