@copilot-web-widgets/common-core-sdk

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (148c6b43da3f4ec787aa611cf721a390eab6918627604a9405d817955e2c472b)
The OpenSSF Package Analysis project identified '@copilot-web-widgets/common-core-sdk' @ 1.11.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

Compromised versions (7)

• 1.11.0
• 1.9.0
• 1.6.0
• 1.10.0
• 1.3.0
• 1.20.0
• 2.100.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.