MAL-2024-10404

    Dashboard / Malicious Package / MAL-2024-10404

    MAL-2024-10404

    Published: 6 Nov 2024Last Modified: 6 Nov 2024

    Summary: Malicious code in @umreg/zxcvbn (npm)

    Details: Source: ossf-package-analysis (c1c32d3bafd41a5ebcf9f25788e3b21ae5bdc79448640dc9312e7a4ecdfb74ce) The OpenSSF Package Analysis project identified '@umreg/zxcvbn' @ 10.10.10 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @umreg/zxcvbn

    Purl: pkg:npm/%40umreg/zxcvbn

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    10.10.10
    MAL-2024-10404 | CVE-DB