Lucene search

K
osvGoogleOSV:MAL-2024-1645
HistoryJun 20, 2024 - 3:22 a.m.

Malicious code in comet-chat-react-ui-kit (npm)

2024-06-2003:22:51
Google
osv.dev
2
package
npm
malicious communication

AI Score

7.4

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (9a6f38c4d9dd2413e237c8d146d5fcf11d04f613910b552a32a52b3e4cf199f6)

The OpenSSF Package Analysis project identified β€˜comet-chat-react-ui-kit’ @ 1.0.1 (npm) as malicious.

It is considered malicious because:

  • The package executes one or more commands associated with malicious behavior.

AI Score

7.4

Confidence

High