Malicious code in @myorder-frontend-commons/analytics (npm)

The OpenSSF Package Analysis project detected that the '@myorder-frontend-commons/analytics' npm package versions 3.0.0, 10.0.0, and 99.0.0 exhibit malicious behavior by communicating with a domain associated with malicious activity. This indicates the package may be used to exfiltrate data or perform other unauthorized actions. No CVSS score or detailed technical exploit information is provided.

Use of these specific versions of the package may lead to unauthorized communication with malicious domains, potentially resulting in data leakage or compromise of systems that include this package. No confirmed exploits in the wild have been reported.

No official patch or remediation guidance is provided. Users should avoid using the affected versions (=3.0.0, =10.0.0, =99.0.0) of the '@myorder-frontend-commons/analytics' package. Consider removing or replacing the package with a trusted alternative. Monitor vendor advisories for updates or fixes.