{"id":"MAL-2024-3246","summary":"Malicious code in @expue/types (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-EXPUETYPES-5920723"],"modified":"2024-10-24T01:01:55Z","published":"2024-06-25T12:19:41Z","database_specific":{"malicious-packages-origins":[{"import_time":"2024-06-28T02:41:20.7034357Z","modified_time":"2024-06-25T12:19:41Z","sha256":"ef9ef9827e2b155c780ba2b9b21422c64928e2b133ccebb716f87d85ee00de92","source":"reversing-labs","versions":["0.0.3-alpha.0"],"id":"RLMA-2024-00067"},{"modified_time":"2024-06-25T12:19:41Z","sha256":"e3273ad96267d74403f8d0a041570730d20960f5c07ce27abc3a4f15e489d369","source":"reversing-labs","versions":["0.0.3-alpha.0"],"id":"RLMA-2024-00067","import_time":"2024-10-24T00:49:16.247828123Z"},{"modified_time":"2024-10-16T12:21:59Z","sha256":"f8d00802e28cc42f1bde859218ba2b5d21716ec36a9c44982911080a39c6e7bb","source":"reversing-labs","id":"RLUA-2024-05917","import_time":"2024-10-24T00:57:17.937911921Z"}]},"references":[{"type":"ARTICLE","url":"https://blog.phylum.io/sensitive-data-exfiltration-campaign-targets-npm-and-pypi/"},{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-EXPUETYPES-5920723"}],"affected":[{"package":{"name":"@expue/types","ecosystem":"npm","purl":"pkg:npm/%40expue/types"},"versions":["0.0.3-alpha.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@expue/types/MAL-2024-3246.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}