MAL-2024-1352

    Dashboard / Malicious Package / MAL-2024-1352

    MAL-2024-1352

    Published: 4 May 2024Last Modified: 9 May 2024

    Summary: Malicious code in @aluffyz/discord-botjs (npm)

    Details: Source: ossf-package-analysis (19d4e14d28ee6d6844110ceb637db248af639739f0215ffe4336c12482e453fb) The OpenSSF Package Analysis project identified '@aluffyz/discord-botjs' @ 1.4.5 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: @aluffyz/discord-botjs

    Purl: pkg:npm/%40aluffyz/discord-botjs

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.4.5
    1.4.3
    1.4.7
    MAL-2024-1352 | CVE-DB