Malicious code in @eforms/forms-api (npm)

Source: ossf-package-analysis cbe6ac9c18c859c04807fb2bd866f2eda2b70a4aa2583096b7138ab2adc90540 The OpenSSF Package Analysis project identified '@eforms/forms-api' @ 2.0.0-SNAPSHOT npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in @eforms/forms-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58d3810346fb211fd7ed78e8df88c774a79bb079537e10cd30baa26e5ef4740 The npm package @eforms/[email protected] is a scoped-name dependency-confusion lure with an inflated version number and an empty index.js stub. Its...