MAL-2023-1129

    Dashboard / Malicious Package / MAL-2023-1129

    MAL-2023-1129

    Published: 3 May 2023Last Modified: 10 Aug 2023

    Summary: Malicious code in capacity-planning-projection (npm)

    Details: Source: ossf-package-analysis (d7ac9faaa73ac47db42566e3a2cc701408654503c387c47528d9fb69d6545da1) The OpenSSF Package Analysis project identified 'capacity-planning-projection' @ 9.1.3 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: capacity-planning-projection

    Purl: pkg:npm/capacity-planning-projection

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    9.1.3
    9.1.2
    MAL-2023-1129 | CVE-DB