Supply-chain threat intelligence
Incident detail
Risk score
92
AI summary
Indexed incident for vue-demi-fix (npm).
Description
The OpenSSF Package Analysis project identified 'vue-demi-fix' @ 10.0.4 (npm) as malicious.
It is considered malicious because:
- The package executes one or more commands associated with malicious behavior.
Technical details
Affected versions
=10.0.4
Indicators
- affected version=10.0.475%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in module-index-cache (npm)module-index-cache92
- Malicious code in @sudoughnym/enviro-demo (npm)@sudoughnym/enviro-demo92
- Malicious code in @businessapp-microsites/apis (npm)@businessapp-microsites/apis92
- Malicious code in yian666aikf (npm)yian666aikf92
- Malicious code in yianzzkf6687 (npm)yianzzkf668792