MAL-2023-1208

    Dashboard / Malicious Package / MAL-2023-1208

    MAL-2023-1208

    Published: 12 May 2023Last Modified: 12 May 2023

    Summary: Malicious code in ikea-jssdk (npm)

    Details: Source: ossf-package-analysis (c7ee2c27d65f23dc603308d3cb624e657745f399a18181feac7ab7a3d176d931) The OpenSSF Package Analysis project identified 'ikea-jssdk' @ 1.2.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: ikea-jssdk

    Purl: pkg:npm/ikea-jssdk

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.2.1
    MAL-2023-1208 | CVE-DB