expertsvc-onboard-offboard

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (fd6d7a1267ed4ecc6a46b548be6778e2f198c0ec5629953d3e9e6a79e1f213df)
The package expertsvc-onboard-offboard was found to contain malicious code.

## Source: ossf-package-analysis (756a908558c34a29a778fb8ede3ad7f9a4ffec733d3e6dc28169c70e65908381)
The OpenSSF Package Analysis project identified 'expertsvc-onboard-offboard' @ 12.124.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

• 12.124.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.