4 matches found
MAL-2023-1348 Malicious code in xdefi-distribution (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 352ef361ef8485fc98aa4e128cd2942a1de8926508bc3b2f76b0cbbe831ee3af The OpenSSF Package Analysis project identified 'xdefi-distribution' @ 99.9.9 npm as malicious. It is considered malicious because: - The packag...
Malicious code in xdefi-distribution (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 352ef361ef8485fc98aa4e128cd2942a1de8926508bc3b2f76b0cbbe831ee3af The OpenSSF Package Analysis project identified 'xdefi-distribution' @ 99.9.9 npm as malicious. It is considered malicious because: - The packag...
Malicious Package
Overview xdefi-distribution is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...
Malicious Package
Overview xdefi-distribution-rewards is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...