npm
Malicious @bmg-web/bmg-key-value @999.9999.99
Vulnerability report · Last retrieved from osv.dev July 9, 2026 at 12:27 PM UTC
OSV ID
MAL-2026-7051
Ecosystem
npm
Summary
Malicious code in @bmg-web/bmg-key-value (npm)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.