Malicious code in smart-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6 The OpenSSF Package Analysis project identified 'smart-commons' @ 19.6.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1298 Malicious code in smart-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6 The OpenSSF Package Analysis project identified 'smart-commons' @ 19.6.1 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview smart-commons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...