MAL-2023-8745

    Dashboard / Malicious Package / MAL-2023-8745

    MAL-2023-8745

    Published: 26 Dec 2023Last Modified: 26 Dec 2023

    Summary: Malicious code in @pkg-m/m (npm)

    Details: Source: ossf-package-analysis (a729a302e12ce9d988b8cd980f21cbf38d7e40262fdc86d5d7a0bbc7427e5635) The OpenSSF Package Analysis project identified '@pkg-m/m' @ 1.3.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @pkg-m/m

    Purl: pkg:npm/%40pkg-m/m

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.3.9
    MAL-2023-8745 | CVE-DB