Lucene search

K
osvGoogleOSV:MAL-2024-7058
HistoryJun 29, 2024 - 5:55 p.m.

Malicious code in kiln-desktop (npm)

2024-06-2917:55:15
Google
osv.dev
2
kiln-desktop
npm
malicious
communication
domain
activity

7.1 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (ef3b624dee4eb3ef776b321ad28eddf3bc2d6cde2852fdcb47b0ef795047c6bf)

The OpenSSF Package Analysis project identified β€˜kiln-desktop’ @ 2.2.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
CPENameOperatorVersion
kiln-desktopeq2.2.0

7.1 High

AI Score

Confidence

High