Lucene search

K
osvGoogleOSV:MAL-2023-7905
HistoryAug 25, 2023 - 5:35 a.m.

Malicious code in eslint-config-web3-base (npm)

2023-08-2505:35:33
Google
osv.dev
11
malicious code
eslint-config-web3-base
npm

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84)

The OpenSSF Package Analysis project identified β€˜eslint-config-web3-base’ @ 0.1.2 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.