Malicious code in flp_hk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b67d12ada5f46c9de6e13923538f25159e524761b2188821fd2be3831afd8cc5 The OpenSSF Package Analysis project identified 'flphk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2023-1183 Malicious code in flp_hk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b67d12ada5f46c9de6e13923538f25159e524761b2188821fd2be3831afd8cc5 The OpenSSF Package Analysis project identified 'flphk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

Malicious Package

Overview flphk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...