Lucene search

K
osvGoogleOSV:MAL-2023-5
HistoryMay 01, 2023 - 2:25 a.m.

Malicious code in eslint-plugin-indeed (npm)

2023-05-0102:25:46
Google
osv.dev
3
openssf package analysis
eslint-plugin-indeed
malicious activity

7.1 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0)

The OpenSSF Package Analysis project identified β€˜eslint-plugin-indeed’ @ 99.99.9 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

7.1 High

AI Score

Confidence

High