{"id":"MAL-2024-3976","summary":"Malicious code in yasap-bump (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["SNYK-JS-YASAPBUMP-3326393"],"modified":"2024-10-24T01:01:57Z","published":"2024-06-25T13:22:36Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2024-06-25T13:22:36Z","sha256":"39be4ceb9e2c2f9a8cc875b5cc551a660770eed3907071e58ee53a118374b142","source":"reversing-labs","versions":["1.3.17","1.0.10","1.0.9","3.1.37"],"id":"RLMA-2024-02753","import_time":"2024-06-28T02:46:42.051922628Z"},{"sha256":"eb50e399a1231a2b3c42650cdf28a2e5b8bfb085b86d408ba53ec142832c4f77","source":"reversing-labs","id":"RLUA-2024-07608","import_time":"2024-10-24T00:58:34.410722597Z","modified_time":"2024-10-16T13:46:38Z"}]},"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-YASAPBUMP-3326393"}],"affected":[{"package":{"name":"yasap-bump","ecosystem":"npm","purl":"pkg:npm/yasap-bump"},"versions":["1.3.17","1.0.10","1.0.9","3.1.37"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/yasap-bump/MAL-2024-3976.json"}}],"schema_version":"1.7.3","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}