Lucene search
GoogleOSV:MAL-2024-1667HistoryJun 26, 2024 - 12:41 p.m.
Malicious code in @wdp-gov/lineage-component (npm)
2024-06-2612:41:06
Google
osv.dev
3
malicious package
openssf analysis
npm
@wdp-gov/lineage-component
7.1 High
AI Score
Confidence
High
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (d71a3c3672d613586050e5166426a68d0f5b4ab173d202c331b0259a3919c5a3)
The OpenSSF Package Analysis project identified ‘@wdp-gov/lineage-component’ @ 1.0.33 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @wdp-gov/lineage-component | eq | 1.0.33 | |
| @wdp-gov/lineage-component | eq | 1.1.40 | |
| @wdp-gov/lineage-component | eq | 1.1.39 |
7.1 High
AI Score
Confidence
High