Lucene search

K
osvGoogleOSV:MAL-2024-1136
HistoryMar 21, 2024 - 1:32 a.m.

Malicious code in region-selector-content (npm)

2024-03-2101:32:22
Google
osv.dev
4
malicious package
communicates with malicious domain
executes malicious commands
npm package

7.3 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (ff0393e9f3a6a405065088df076729bb9436bdad64329c0f3eb1dfd8a5ad6638)

The OpenSSF Package Analysis project identified β€˜region-selector-content’ @ 99.3.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

7.3 High

AI Score

Confidence

High