3 matches found
Malicious code in fr-ito-web-react (npm)
Source: ossf-package-analysis bac76856f8825e8e433f56d508f0fdc44c9397a172c3cb1935e893de74aa03c1 The OpenSSF Package Analysis project identified 'fr-ito-web-react' @ 99.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious code in fr-ito-web-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...
MAL-2026-14019 Malicious code in fr-ito-web-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...