Malicious code in vision-chart (npm)

2023-08-2100:00:00

Google

osv.dev

malicious code

npm

vision-chart

stealing

source code

secrets

campaign

developers

7.4 High

AI Score

Confidence

Low

JSON

-= Per source details. Do not edit below this line.=-

Source: checkmarx (22b046ac73ecbc50209ffe4bb757a9736adafeb2a51ad9123c0d8a3902374246)

Malicious packages campaign since 2021 targeting developers, steals source code and secrets

CPENameOperatorVersion
vision-charteq2.0.11
vision-charteq2.9.11
vision-charteq3.9.11
vision-charteq1.1.11
vision-charteq0.9.11
vision-charteq1.0.11
vision-charteq0.1.11
vision-charteq3.0.11
vision-charteq1.2.11
vision-charteq1.4.11

Name	Operator	Version
vision-chart	eq	2.0.11
vision-chart	eq	2.9.11
vision-chart	eq	3.9.11
vision-chart	eq	1.1.11
vision-chart	eq	0.9.11
vision-chart	eq	1.0.11
vision-chart	eq	0.1.11
vision-chart	eq	3.0.11
vision-chart	eq	1.2.11
vision-chart	eq	1.4.11

Rows per page:

1-10 of 111

References

medium.com/checkmarx-security/an-ongoing-open-source-attack-reveals-roots-dating-back-to-2021-4a511979fd98

security.snyk.io/vuln/SNYK-JS-VISIONCHART-5876596

7.4 High

AI Score

Confidence

Low

JSON