Lucene search

K
osvGoogleOSV:MAL-2024-1611
HistoryJun 15, 2024 - 12:29 p.m.

Malicious code in employee-schedule (npm)

2024-06-1512:29:45
Google
osv.dev
malicious code
employee-schedule
npm
openssf
package analysis

7.1 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (71b36d3a13dcd71ba835e490919b150ec8fbc7de88517906ec7aecaaf89dcbab)

The OpenSSF Package Analysis project identified β€˜employee-schedule’ @ 99.9.2 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
CPENameOperatorVersion
employee-scheduleeq99.9.2

7.1 High

AI Score

Confidence

High