Malicious code in verycoolzpac (npm)

2023-05-1203:49:58

Google

osv.dev

malicious code

verycoolzpac

npm

communicating

malicious domain

JSON

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587)

The OpenSSF Package Analysis project identified ‘verycoolzpac’ @ 0.39.9999 (npm) as malicious.

It is considered malicious because:

The package communicates with a domain associated with malicious activity.

CPENameOperatorVersion
verycoolzpaceq0.3.7
verycoolzpaceq0.3.9
verycoolzpaceq0.3.2
verycoolzpaceq0.2.5
verycoolzpaceq0.3.8
verycoolzpaceq0.2.6
verycoolzpaceq0.3.0
verycoolzpaceq0.3.5
verycoolzpaceq0.3.4
verycoolzpaceq0.3.1

Name	Operator	Version
verycoolzpac	eq	0.3.7
verycoolzpac	eq	0.3.9
verycoolzpac	eq	0.3.2
verycoolzpac	eq	0.2.5
verycoolzpac	eq	0.3.8
verycoolzpac	eq	0.2.6
verycoolzpac	eq	0.3.0
verycoolzpac	eq	0.3.5
verycoolzpac	eq	0.3.4
verycoolzpac	eq	0.3.1

Rows per page:

1-10 of 161

JSON