THREATPKG
SYNC STALE
Supply-chain threat intelligence
Incident detail
Risk score
92
AI summary
Indexed incident for @neon-i18n/core-ui (npm).
Description
-= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (dbdc5bd090d8e85771f77fa3a7a113e08fbfb31de54ae399ed92565bdac246df)
The OpenSSF Package Analysis project identified '@neon-i18n/core-ui' @ 99.99.99 (npm) as malicious.
It is considered malicious because:
- The package executes one or more commands associated with malicious behavior.
Technical details
Affected versions
<function fixed() { [native code] }
Indicators
- affected_version<function fixed() { [native code] }75%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in sorenson-webfonts (npm)sorenson-webfonts92
- Malicious code in lib-1779997093-yjeeqn (PyPI)lib-1779997093-yjeeqn92
- Malicious code in my-test-package-2025-xyz (PyPI)my-test-package-2025-xyz92
- Malicious code in @polka-ui/config (npm)@polka-ui/config92
- Malicious code in editorial-code (npm)editorial-code92