Malicious code in kmf-i18n (npm)

The OpenSSF Package Analysis project detected that the 'kmf-i18n' package at version 100.100.102 on npm exhibits malicious behavior by communicating with a domain associated with malicious activity. This indicates the package may be used to facilitate unauthorized or harmful operations, compromising systems that include it as a dependency.

Systems or projects that incorporate 'kmf-i18n' version 100.100.102 risk exposure to malicious network communications, which could lead to data exfiltration, unauthorized access, or other malicious outcomes depending on the nature of the external domain interaction. No specific exploit details or active exploitation in the wild have been reported.

No patch or remediation is currently documented for this package version. Users should avoid using 'kmf-i18n' version 100.100.102 and remove it from their dependencies if present. Monitor vendor or repository advisories for updates or official remediation guidance.