Supply-chain threat intelligence
Incident detail
Risk score
92
AI summary
Indexed incident for @andes-tools/colors (npm).
Description
The OpenSSF Package Analysis project identified '@andes-tools/colors' @ 999.0.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Technical details
Affected versions
=999.0.0
Indicators
- affected version=999.0.075%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in starlette-healthcheck (PyPI)starlette-healthcheck92
- Malicious code in svgcraft-core (npm)svgcraft-core92
- Malicious code in test-pkg-pnpm (npm)test-pkg-pnpm92
- Malicious code in test-pkg-x0 (npm)test-pkg-x092
- Malicious code in polymarket-trading-developer-tool (npm)polymarket-trading-developer-tool92