Malicious code in myattenuator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview myattenuator is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...