MAL-2024-11792

    Dashboard / Malicious Package / MAL-2024-11792

    MAL-2024-11792

    Published: 12 Dec 2024Last Modified: 12 Dec 2024

    Summary: Malicious code in @infoserver/gov-shared-ui (npm)

    Details: Source: ossf-package-analysis (5b54fde6a5995ffcf57ff5e926b8e0ddb11018b6a6107970a724342f83745df0) The OpenSSF Package Analysis project identified '@infoserver/gov-shared-ui' @ 21.2.15 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @infoserver/gov-shared-ui

    Purl: pkg:npm/%40infoserver/gov-shared-ui

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    21.2.15
    MAL-2024-11792 | CVE-DB