amazon-q-developer-streaming-client

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (2612d348229614bb857a8f2c30c1ad2d66954d7a05073f15319f8aca2fb1a86d)
The package amazon-q-developer-streaming-client was found to contain malicious code.

## Source: ossf-package-analysis (bedb03611546444363288fafa5c9320d572a8fc1bcbfd52a1886076523c182d7)
The OpenSSF Package Analysis project identified 'amazon-q-developer-streaming-client' @ 99.9.13 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

Compromised versions (3)

• 99.9.13
• 99.9.15
• 99.9.11

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.