Lucene search

K
osvGoogleOSV:MAL-2024-138
HistoryJan 21, 2024 - 9:40 p.m.

Malicious code in cagov-template-v5 (npm)

2024-01-2121:40:48
Google
osv.dev
12
malicious code
cagov-template-v5
npm
communicates
domain
executes
commands

7.3 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6)

The OpenSSF Package Analysis project identified ‘cagov-template-v5’ @ 19.2.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

7.3 High

AI Score

Confidence

High