Lucene search
GoogleOSV:MAL-2023-1118HistoryJul 27, 2023 - 5:00 p.m.
Malicious code in aws-sdk-js-v3 (npm)
2023-07-2717:00:43
Google
osv.dev
5
aws-sdk-js-v3
npm
malicious
package
security
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (e64c49f08b91cb456113ae44bbd8efc8280a1c79aa45ca1bd0f019c4af6ad873)
The OpenSSF Package Analysis project identified ‘aws-sdk-js-v3’ @ 1.3.7 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aws-sdk-js-v3 | eq | 1.3.7 |
7.1 High
AI Score
Confidence
High