The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.
Weakness
The product contains code that appears to be malicious in nature.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Npm-script-demo | Npm-script-demo_project | 0.0.1 (including) | 0.0.1 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/442.html
- https://cwe.mitre.org/data/definitions/448.html
- https://cwe.mitre.org/data/definitions/636.html