Lucene search

K
osvGoogleOSV:MAL-2024-1058
HistoryMar 07, 2024 - 12:45 p.m.

Malicious code in jaas-jwt (npm)

2024-03-0712:45:43
Google
osv.dev
9
openssf package analysis
malicious activity
npm
jaas-jwt

7.1 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (76d51349ced57684619394edb9408c414e03cfcd5c3add0128648bbf3ff3f08a)

The OpenSSF Package Analysis project identified ‘jaas-jwt’ @ 1.0.2 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
CPENameOperatorVersion
jaas-jwteq1.0.2

7.1 High

AI Score

Confidence

High