Lucene search

K
osvGoogleOSV:MAL-2024-1648
HistoryJun 20, 2024 - 3:28 p.m.

Malicious code in wordpress-theme-core (npm)

2024-06-2015:28:20
Google
osv.dev
wordpress-theme-core
malicious code
npm
software security

7.3 High

AI Score

Confidence

High


-= Per source details. Do not edit below this line.=-

Source: ossf-package-analysis (11ba6949abd5e27add3ceeb9c4709ae17be63d4831af09c7f34ca236d3b06b8e)

The OpenSSF Package Analysis project identified β€˜wordpress-theme-core’ @ 0.0.123 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.

  • The package executes one or more commands associated with malicious behavior.

7.3 High

AI Score

Confidence

High