Lucene search

K
osvGoogleOSV:MAL-2024-7057
HistoryJun 29, 2024 - 5:28 p.m.

Malicious code in bageth (npm)

2024-06-2917:28:08
Google
osv.dev
1
malicious activity
bageth
npm

7.1 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (e0fb8d217f32446aeb4dbf744d45c5aadd152f0917a228ead1ad0183ac18b995)

The OpenSSF Package Analysis project identified β€˜bageth’ @ 2.0.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
CPENameOperatorVersion
bagetheq2.0.0
bagetheq1.0.0

7.1 High

AI Score

Confidence

High