npm
Malicious @bmg-web/bmg-grid @999.9999.99
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 4:30 AM UTC
OSV ID
MAL-2026-2988
Ecosystem
npm
Summary
The package @bmg-web/bmg-grid was found to contain malicious code.
Source: amazon-inspector (3145866a6b18a164c2246b0a000b18412f9f8cc10f5c4192a2a8925d213bedb1)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.