This analysis was performed using vet and SafeDep Cloud Malicious Package Analysis. Integrate with GitHub using vet-action GitHub Action.
Note: This report is updated by a verification record
The package is marked as malware by OSV: MAL-2024-11841 with source: ossf-package-analysis
-= Per source details. Do not edit below this line.=-
The OpenSSF Package Analysis project identified 'graphql.vscode-graphql-syntax' @ 99.99.99 (npm) as malicious.
It is considered malicious because:
The package communicates with a domain associated with malicious activity.
The package executes one or more commands associated with malicious behavior.
Note: This report is updated by a verification record
Analyzer 'Package Project Analyzer' detected the project to be serving malware with high confidence