Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/24 4:17 a.m.3 views

Malicious code in amazon-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67f6356994dd39435390e83ed9cb9495679ba7bd9430eb6deb610ff5a59ed159 The OpenSSF Package Analysis project identified 'amazon-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/01/24 4:17 a.m.6 views

MAL-2025-375 Malicious code in amazon-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67f6356994dd39435390e83ed9cb9495679ba7bd9430eb6deb610ff5a59ed159 The OpenSSF Package Analysis project identified 'amazon-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
Snyk
Snyk
added 2022/08/19 8:11 a.m.3 views

Malicious Package

Overview amazon-connect-reference-dialer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder