Lucene search

K
osvGoogleOSV:MAL-2023-8422
HistoryNov 02, 2023 - 12:58 p.m.

Malicious code in bistrosk (npm)

2023-11-0212:58:00
Google
osv.dev
12
malicious
bistrosk
npm
package
version
communicates
domain
associated
activity

7.2 High

AI Score

Confidence

Low


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (275abca8527ba6a0a29bf30537bad45fb01533a199b59ca9543da88dda4f8334)

The OpenSSF Package Analysis project identified β€˜bistrosk’ @ 200.0.3 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
CPENameOperatorVersion
bistroskeq1.0.0
bistroskeq200.0.3

7.2 High

AI Score

Confidence

Low