Malicious Package

Overview blablablabla is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in blablablabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd2b2f6e1811c31bc38b88ead4b4ae8e2fb7006281d75f272d5b87f08a0e9064 The OpenSSF Package Analysis project identified 'blablablabla' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...