npm · Malicious package advisory
Malware@energysolutions/mylib
MAL-2024-8938
Malicious code in @energysolutions/mylib (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (08f12d3c3e2e99f5bcec121d93fe4ece6a29ff57478e2e93e0cff0d4309832ac) The OpenSSF Package Analysis project identified '@energysolutions/mylib' @ 999999999.999999.999999 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (10)
- 99.9.9
- 99.9.7
- 99.9.3
- 999999999.999999.999999
- 9998.998.998
- 9998.999.999
- 99999.99999.9999
- 9999999.999999.999999
- 99999999.999999.999999
- 999.99.99
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.