edu-npm-dependency-chain-demo

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (b2a7d2f1e015cb530cbc560ff593abba9ecbdde04868643cc1f46c7c23b7252d)
The package was found to contain malicious code or consuming dependency that contains malicious code

## Source: ossf-package-analysis (5a2508b833cc9048538d7b995e19fdc3abb6807800a2650ef808f248a3502139)
The OpenSSF Package Analysis project identified 'edu-npm-dependency-chain-demo' @ 1.0.4 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

• 1.0.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.