Malicious code in repsol-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ded61aa0f6be46c0b02bb6eb5deb82d4dd4830e41a76cdf52d9d21576c50c57 The OpenSSF Package Analysis project identified 'repsol-uikit' @ 9.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8053 Malicious code in repsol-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ded61aa0f6be46c0b02bb6eb5deb82d4dd4830e41a76cdf52d9d21576c50c57 The OpenSSF Package Analysis project identified 'repsol-uikit' @ 9.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview repsol-uikit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...