MAL-2024-7771

    Dashboard / Malicious Package / MAL-2024-7771

    MAL-2024-7771

    Published: 18 Jul 2024Last Modified: 18 Jul 2024

    Summary: Malicious code in express-jwt-v6 (npm)

    Details: Source: ossf-package-analysis (fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648) The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References:

    Affected packages

    Package

    Name: express-jwt-v6

    Purl: pkg:npm/express-jwt-v6

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    6.0.6
    MAL-2024-7771 | CVE-DB