Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•6 views

Malicious code in latam-xp-analytics-plugin-gtm (npm)

Source: ossf-package-analysis 333a48f2dfbcb9ab75608fb120182771732f71543d3bc13c3352b144b3022403 The OpenSSF Package Analysis project identified 'latam-xp-analytics-plugin-gtm' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.9AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/09/17 7:19 a.m.•13 views

Malicious Package

Overview latam-xp-analytics-plugin-gtm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder