@gaia-codesearch/gaia-api-python

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (bffb43bbb30e1d5c01c4c389983726a49a5489ddebcfef91353d03f7a767d01f)
The package @gaia-codesearch/gaia-api-python was found to contain malicious code.

## Source: ossf-package-analysis (a2e1f356fe59b17e0506a18830d5cb200068eac98fcd4ed8439105edc5dc717c)
The OpenSSF Package Analysis project identified '@gaia-codesearch/gaia-api-python' @ 0.0.5 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (2)

• 0.0.5
• 0.0.8

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.