Malicious code in jquery.ui.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5bc94d3ac40b31064d4dad8125dc959fdc3559785cdbeb03de2cc16c147ac Package is a dependency-confusion squat on the jquery.ui.core name published at version 9999.0.0. The main entry index.js is empty module.exports = ;...

com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 (>=1.0.1, <=1.0.2), com.googlecode.wicket-jquery-ui:jquery-ui-calendar (>=1.4.0, <=1.4.1) +220 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.9)

org.apache.wicket:wicket-core MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 =1.0.1, =1.4.0, =1.4.0,...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=7.0.0-m3, <=7.0.0-m4), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=7.0.0-m3, <=7.0.0-m4) +284 more potentially affected by CVE-2014-7808 via org.apache.wicket:wicket-core (>=7.0.0-m1, <=7.0.0-m4)

org.apache.wicket:wicket-core MAVEN version =7.0.0-m1, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m3, =7.0.0-m4 - com.googlecode.wicke...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.googlecode.wicket-charts:wicket-charts (>=1.0.0, <=1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-core (>=1.0, <=1.1) +201 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.5)

org.apache.wicket:wicket-core MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-charts:wicket-charts =1.0.0, =1.0, =1.1 - org.apache.wicket:wicket 1.5.5 -...

com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 (>=1.0.1, <=1.0.2), com.googlecode.wicket-jquery-ui:jquery-ui-calendar (>=1.4.0, <=1.4.1) +220 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.9)

org.apache.wicket:wicket-core MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 =1.0.1, =1.4.0, =1.4.0,...