Malicious code in identityscimapiserv (npm)
Affects identityscimapiservSource GCVE Database
Rated by Threat Radar
Data as of 07/25/2026, 23:44:12 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmidentityscimapiserv | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using 'identityscimapiserv' version 28.0.0 and remove it from their environments if present. Monitor vendor advisories or trusted security sources for updates or official remediation guidance.
Description
The npm package 'identityscimapiserv' version 28.0.0 has been identified as malicious. It is flagged because it communicates with a domain linked to malicious activity. There is no CVSS score or detailed technical exploitation information available. No known exploits in the wild have been reported. No patch or remediation guidance is provided at this time.
Impact
Use of the malicious package version 28.0.0 may expose systems to risks associated with communication to malicious domains, potentially leading to data exfiltration, unauthorized access, or other malicious outcomes. However, specific impacts are not detailed in the source data.
Summary
The OpenSSF Package Analysis project detected that the npm package 'identityscimapiserv' at version 28.0.0 exhibits malicious behavior by communicating with a domain associated with malicious activity. This classification is based on observed network behavior rather than a traditional vulnerability. No further technical details or exploit mechanisms are provided.