Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/25 1:3 p.m.8 views

Malicious code in wrangler-dev-api-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61404905188d42181fbf3217b2ebffe91c1328a0cd469718a53faec95f244738 The OpenSSF Package Analysis project identified 'wrangler-dev-api-app' @ 24.12.47 npm as malicious. It is considered malicious because: - The...

6.9AI score
SaveExploits0
Snyk
Snyk
added 2022/09/13 8:13 a.m.6 views

Malicious Package

Overview wrangler-dev-api-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder