Closed Shivang0 closed 1 month ago
While not strictly malicious, this package does fall into the what is acceptable for this repository (see changes proposed in #381).
interactsh
tool. Hostname is sensitive enough to launch further targeted attacks.react
related package - likely indicating a dependency confusion attempt.react-devtools-fusebox
in question have been removed from NPM.v2.0.1
(not included in the advisory) exfiltrated further identifying data (including username, and homedir).
MAL-2024-7418 is not malicious but just sending a ping to a host