icon

We found results for “

MSC-2023-18579

Date: December 31, 2023

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running (user's machine or backend server). The following risks were identified: Protestware – this package contains code that differs from the stated functionality. This can be as simple as opening a web URL to protest or, in some cases could, delete files.

Language: JS

Severity Score

Severity Score

Weakness Type (CWE)

Hidden Functionality

CWE-912

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us