Lucene search
GoogleOSV:MAL-2023-1111HistoryMay 03, 2023 - 1:37 a.m.
Malicious code in afterpay-sdk-example-server (npm)
2023-05-0301:37:43
Google
osv.dev
6
malicious code
afterpay-sdk-example-server
npm
domain
communication
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (555a159aa3b74ea73f8574c05e14aa536948cbe56b0420bcdcc0daa2a911ae2c)
The OpenSSF Package Analysis project identified ‘afterpay-sdk-example-server’ @ 20.0.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| afterpay-sdk-example-server | eq | 20.0.0 |
7.1 High
AI Score
Confidence
High