Lucene search

K
osvGoogleOSV:MAL-2024-1620
HistoryJun 17, 2024 - 4:35 p.m.

Malicious code in commando333333 (npm)

2024-06-1716:35:41
Google
osv.dev
malicious code
npm package
command execution
domain communication

7.3 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (3da17f518475bb94d3d0740d0e1fc486dcce1f4fd1c8f86b9578176c4ea04a03)

The OpenSSF Package Analysis project identified β€˜commando333333’ @ 10.0.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

CPENameOperatorVersion
commando333333eq10.0.0

7.3 High

AI Score

Confidence

High