Lucene search
GoogleOSV:MAL-2023-1120HistoryMay 05, 2023 - 4:47 a.m.
Malicious code in back-alley (npm)
2023-05-0504:47:24
Google
osv.dev
1
malicious activity
openssf package analysis
communication with domain
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7)
The OpenSSF Package Analysis project identified ‘back-alley’ @ 1.1.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| back-alley | eq | 1.1.0 |
7.1 High
AI Score
Confidence
High