Lucene search

K
osvGoogleOSV:MAL-2024-7771
HistoryJul 18, 2024 - 11:33 a.m.

Malicious code in express-jwt-v6 (npm)

2024-07-1811:33:10
Google
osv.dev
6
package analysis
express-jwt-v6
npm
malicious activity

AI Score

7.1

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648)

The OpenSSF Package Analysis project identified β€˜express-jwt-v6’ @ 6.0.6 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

AI Score

7.1

Confidence

High