MAL-2025-6296 Malicious code in node-buildpack-test-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 853e825cb3a7ee79b6c801ac036e895ab6ef780891a544abe6b9f5c54bdc33b9 The OpenSSF Package Analysis project identified...

Malicious code in node-buildpack-test-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 853e825cb3a7ee79b6c801ac036e895ab6ef780891a544abe6b9f5c54bdc33b9 The OpenSSF Package Analysis project identified...

Malicious Package

Overview node-buildpack-test-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...