Malicious code in keystone-app (npm)

Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

MAL-2025-132 Malicious code in keystone-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in keystone-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

create-keystone-app-master (>=6.0.21, <=6.0.22) potentially affected by CVE-2023-34247 via @keystone-6/auth (2.0.0)

@keystone-6/auth NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/auth and may be impacted: - create-keystone-app-master =6.0.21, =6.0.22 Source cves: CVE-2023-34247 Source advisory: MEND:CVE-2023-34247...