Malicious code in twinmotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0627a5bcf9887521a72abc5568ab4cf60f65b073d5b0b1c5d2978eeb30079cfd The OpenSSF Package Analysis project identified 'twinmotion' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1324 Malicious code in twinmotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0627a5bcf9887521a72abc5568ab4cf60f65b073d5b0b1c5d2978eeb30079cfd The OpenSSF Package Analysis project identified 'twinmotion' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview twinmotion is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...