VYPR
← All malware advisories

npm · Malicious package advisory

Malware

eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests

MAL-2023-1177

Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455)
The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 (npm) as malicious.

It is considered malicious because:
- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.