Lucene search

K

GoogleOSV:MAL-2023-8011

HistoryJul 31, 2023 - 12:00 a.m.

Malicious code in awell-libs (npm)

2023-07-3100:00:00

Google

osv.dev

6

malicious packages campaign

source code theft

secret theft

software security

AI Score

7.4

Confidence

Low

-= Per source details. Do not edit below this line.=-

Source: checkmarx (f22989168c34b37227bb7bcfe0b03c27cd141f8ec26d34a78a0c0ba06553f881)

Malicious packages campaign since 2021 targeting developers, steals source code and secrets

References

medium.com/checkmarx-security/an-ongoing-open-source-attack-reveals-roots-dating-back-to-2021-4a511979fd98

security.snyk.io/vuln/SNYK-JS-AWELLLIBS-5876609

AI Score

7.4

Confidence

Low