Lucene search
GoogleOSV:MAL-2023-1306HistoryApr 27, 2023 - 12:40 p.m.
Malicious code in store-js-sdk (npm)
2023-04-2712:40:25
Google
osv.dev
4
malicious activity
package analysis
store-js-sdk
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (4462b056f6144f0a42e19147fcc9c5a0277e45631c26bebad88d24513995b773)
The OpenSSF Package Analysis project identified ‘store-js-sdk’ @ 1.0.1 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| store-js-sdk | eq | 1.0.0 | |
| store-js-sdk | eq | 1.0.1 |
7.1 High
AI Score
Confidence
High