Lucene search

K
osvGoogleOSV:MAL-2023-7917
HistoryAug 26, 2023 - 6:06 a.m.

Malicious code in hydra-consent-app-express (npm)

2023-08-2606:06:44
Google
osv.dev
7
malicious communication
hydra-consent-app-express
npm

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3)

The OpenSSF Package Analysis project identified β€˜hydra-consent-app-express’ @ 2.0.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.