Lucene search

K
osvGoogleOSV:MAL-2024-1630
HistoryJun 18, 2024 - 1:50 p.m.

Malicious code in mvp-website-html (npm)

2024-06-1813:50:56
Google
osv.dev
4
mvp-website-html
npm
malicious activity
package
openssf package analysis
commands
domain associated with malicious activity
software

AI Score

7.3

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (89574af4bb00d4c540ffc8651f5ef4bcc0f72af2368ee6e32346807e91d2e8a0)

The OpenSSF Package Analysis project identified ‘mvp-website-html’ @ 2.0.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

AI Score

7.3

Confidence

High