Lucene search

K
osvGoogleOSV:MAL-2024-1646
HistoryJun 20, 2024 - 11:27 a.m.

Malicious code in storefront-h5-sdk (npm)

2024-06-2011:27:51
Google
osv.dev
4
malicious activity domain

AI Score

7.1

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (3bdecd59d5667e506fd4f66d29c575454020e37384211ce8a27e463cd6971298)

The OpenSSF Package Analysis project identified β€˜storefront-h5-sdk’ @ 1.0.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

AI Score

7.1

Confidence

High