Malicious code in merchantprefsservice-paypal (npm)
Affects merchantprefsservice-paypalSource GCVE Database
Rated by Threat Radar
What to do
AI-suggested
No official patch or remediation is currently documented. Users should avoid using 'merchantprefsservice-paypal' version 28.0.0 and remove it from their environments if present. Monitor vendor or security advisories for updates or fixes regarding this package.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmmerchantprefsservice-paypal | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The npm package 'merchantprefsservice-paypal' version 28.0.0 has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious because it communicates with a domain associated with malicious activity. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is provided at this time.