Malicious code in @eforms/forms-api (npm)
Affects @eforms/forms-apiSource GCVE Database
Rated by Threat Radar
Data as of 10/25/2026, 07:51:57 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npm@eforms/forms-api | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the '@eforms/forms-api' package at version 2.0.0-SNAPSHOT due to its malicious nature. Consider removing or replacing this package with a trusted alternative.
Description
The npm package '@eforms/forms-api' version 2.0.0-SNAPSHOT has been identified as malicious. The package is flagged because it communicates with a domain linked to malicious activity. There is no CVSS score available, and no known exploits in the wild have been reported. No patch or remediation information is provided.
Impact
Use of this package version may expose users to malicious network communications, potentially leading to data exfiltration or other malicious outcomes. However, no specific exploitation or impact details are provided, and no active exploits are known.
Summary
The OpenSSF Package Analysis project detected that the npm package '@eforms/forms-api' at version 2.0.0-SNAPSHOT exhibits malicious behavior by communicating with a domain associated with malicious activity. This classification is based on the package's network behavior rather than a specific software vulnerability. No further technical details or exploit information is available.