Malicious Package

Overview attribution-project is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

MAL-2023-111 Malicious code in attribution-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afc91a8d62e415d605efc5e9b132faa79e4d67b5aa087375dff9b544b70715c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in attribution-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afc91a8d62e415d605efc5e9b132faa79e4d67b5aa087375dff9b544b70715c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...