Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/18 3:25 p.m.3 views

Malicious code in docs-component-advanced-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a065d7fc179e436125a277398d58863cc0c5145b5220c893c09409bdd44807d The OpenSSF Package Analysis project identified 'docs-component-advanced-permission' @ 1.1.0 npm as malicious. It is considered malicious becaus...

6.9AI score
SaveExploits0
Snyk
Snyk
added 2022/07/27 8:7 a.m.2 views

Malicious Package

Overview docs-component-advanced-permission is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder