MAL-2023-5

    Dashboard / Malicious Package / MAL-2023-5

    MAL-2023-5

    Published: 1 May 2023Last Modified: 28 Jun 2024Aliases: 
    SNYK-JS-ESLINTPLUGININDEED-3336031

    Summary: Malicious code in eslint-plugin-indeed (npm)

    Details: Source: ossf-package-analysis (cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0) The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References: https://security.snyk.io/vuln/SNYK-JS-ESLINTPLUGININDEED-3336031

    Affected packages

    Package

    Name: eslint-plugin-indeed

    Purl: pkg:npm/eslint-plugin-indeed

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.9
    MAL-2023-5 | CVE-DB