Lucene search

K
osvGoogleOSV:MAL-2024-1618
HistoryJun 13, 2024 - 10:27 p.m.

Malicious code in trip-component-platform-online-subscribe-checkbox (npm)

2024-06-1322:27:59
Google
osv.dev
malicious package
npm
command execution

7.4 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (610d427ac4f8e6ff155a8d38f48ad9910e24ba5239b90b8ebf6e7ba33c2ed486)

The OpenSSF Package Analysis project identified β€˜trip-component-platform-online-subscribe-checkbox’ @ 13.2.0 (npm) as malicious.

It is considered malicious because:

  • The package executes one or more commands associated with malicious behavior.

7.4 High

AI Score

Confidence

High