Supply-chain threat intelligence
Incident detail
criticalnpm·malware·osv
Malicious code in npm-show-date-proof-strings (npm)
Risk score
92
AI summary
Indexed incident for npm-show-date-proof-strings (npm).
Description
The OpenSSF Package Analysis project identified 'npm-show-date-proof-strings' @ 1.0.3 (npm) as malicious.
It is considered malicious because:
- The package executes one or more commands associated with malicious behavior.
Technical details
Affected versions
=1.0.3
Indicators
- affected version=1.0.375%
Timeline
- Advisory published
- Indexed by ThreatPkg