Supply-chain threat intelligence
Incident detail
criticalnpm·malware·osv
Malicious code in retail-location-strategy-frontend (npm)
Risk score
92
AI summary
Indexed incident for retail-location-strategy-frontend (npm).
Description
The OpenSSF Package Analysis project identified 'retail-location-strategy-frontend' @ 1.1.1 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Technical details
Indicators
- affected version<function fixed() { [native code] }75%
- affected version<function fixed() { [native code] }75%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in relativity-pdfjs-dist (npm)relativity-pdfjs-dist92
- Malicious code in mysten_metrics (crates.io)mysten-metrics92
- Malicious code in semantic_search_client (crates.io)semantic-search-client92
- Malicious code in supertag (crates.io)supertag92
- Malicious code in replit_ruspty (crates.io)replit_ruspty92