Malicious code in @wdp-gov/catalog-serialization-engine (npm)

-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (279671687dd3fcc407084cb5aeaab3c707cf47164e8b81c3f1665b61ce19dfd9)

The OpenSSF Package Analysis project identified ‘@wdp-gov/catalog-serialization-engine’ @ 3.0.195 (npm) as malicious.

It is considered malicious because:

• The package communicates with a domain associated with malicious activity.