Lucene search
GoogleOSV:MAL-2024-1641HistoryJun 19, 2024 - 11:22 a.m.
Malicious code in @wdpx/themes (npm)
2024-06-1911:22:12
Google
osv.dev
1
malicious code
wdpx themes
npm
package communication
domain associated with malicious activity
software
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (027f3f6ecca8b2d2bd6a4d8c6b358eb1ea8ea1f094cfe3d2606095b6b17d822f)
The OpenSSF Package Analysis project identified ‘@wdpx/themes’ @ 3.0.2 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @wdpx/themes | eq | 3.0.2 |
7.1 High
AI Score
Confidence
High