npm
The package `bugsnagmw` (npm) version 1.0.3 contains malicious code. The code was obfuscated to avoid detection. The malicious code is designed to steal sensitive information from the user's environment and send it to a remote server. See https://stacklok.com/blog/analysis-of-an-obfuscated-code-attack-on-npms-package-registry for more details. Learn more
| Public repositories of contributors | 0 |
| Followers of contributors | 0 |
| Repository forks | N/A |
| Open issues | N/A |
| Repository watchers | N/A |
| Number of contributors | N/A |
| Repository stars | N/A |
Package lacks declared metadata regarding its source of origin.
Typosquatting is the risk of installing a malicious package that uses a name similar to a legitimate one.
Starjacking can mislead users into trusting a package, hiding malicious code behind inflated popularity.