MAL-2024-10313 Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview evernote-thrift is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...