npm
Malicious @0xlr/test-callback @1.0.0
Vulnerability report · Last retrieved from osv.dev August 5, 2026 at 5:03 PM UTC
OSV ID
MAL-2026-11433
Ecosystem
npm
Summary
@0xlr/test-callback@1.0.0 is a minimal package with no observed installer-harm behavior. No lifecycle scripts performing network fetches or shell execution, no credential or environment scraping, no hardcoded exfiltration endpoints, and no obfuscated payloads were observed in the scanned files.
Source: amazon-inspector (09f54fc6282ea45cdd155c621f41ce7bb3d8f5622ba8eef14cec7e97397b3efa)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.