Malicious code in xo-member-components (npm)
Affects xo-member-componentsSource GCVE Database
Rated by Threat Radar
What to do
AI-suggested
No patch or official remediation information is available. Users should avoid using version 28.0.0 of 'xo-member-components'. Consider removing or replacing this package with a trusted alternative. Monitor vendor advisories for any updates or fixes.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmxo-member-components | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The npm package 'xo-member-components' version 28.0.0 has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious because it communicates with a domain associated with malicious activity. There is no information about available patches or fixes for this version. No known exploits in the wild have been reported. The threat affects only version 28.0.0 of this package.