New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details → →
@ltht-react/types
Advanced tools
@ltht-react/types - npm Package Compare versions
+2
-2
| { | ||
| "name": "@ltht-react/types", | ||
| "version": "2.0.169", | ||
| "version": "2.0.170", | ||
| "description": "> TODO: description", | ||
@@ -32,3 +32,3 @@ "author": "Jonny Smith <jonny.asmith@gmail.com>", | ||
| }, | ||
| "gitHead": "44ebe94fc3c8d2cbc5d995a1e729633aa5bea9ad" | ||
| "gitHead": "b90e9e507b315116b1be97f114fe7f0ddf2005af" | ||
| } |
New alerts
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
No metric changes
No dependency changes