MAL-2023-1170 Malicious code in egstore-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e32b3c589f221c9b4e1d86be2924f6e215e6bf6c03844a5084fb1f04eb33275e The OpenSSF Package Analysis project identified 'egstore-carousel' @ 99.2.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in egstore-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e32b3c589f221c9b4e1d86be2924f6e215e6bf6c03844a5084fb1f04eb33275e The OpenSSF Package Analysis project identified 'egstore-carousel' @ 99.2.2 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview egstore-carousel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...