VYPR
← All malware advisories

npm · Malicious package advisory

Malware

nuxtjs_axios

MAL-2024-9303

Malicious code in nuxtjs_axios (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (dc2f94efdf2068b7e7ceb3c7f058d573962b9484300a6d559ff9d7a947f22008)
The OpenSSF Package Analysis project identified 'nuxtjs_axios' @ 5.13.6 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 5.13.6

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.