MAL-2023-1102

    Dashboard / Malicious Package / MAL-2023-1102

    MAL-2023-1102

    Published: 12 Jul 2023Last Modified: 12 Jul 2023

    Summary: Malicious code in @region-lib/env (npm)

    Details: Source: ossf-package-analysis (67b77b57943caead91d57e182b78c1fa7b2c8da43cfe0779be49215fb55734a4) The OpenSSF Package Analysis project identified '@region-lib/env' @ 2000.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @region-lib/env

    Purl: pkg:npm/%40region-lib/env

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2000.0.1
    MAL-2023-1102 | CVE-DB