Logo
npm

@daylightqc/date-fmt-lite @1.1.1

Vulnerability report · Last retrieved from osv.dev July 24, 2026 at 7:22 AM UTC

Malicious

OSV ID

MAL-2026-11041

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified '@daylightqc/date-fmt-lite' @ 1.1.1 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

Source: ossf-package-analysis (70c4984ac7bf7b1e15e3b449e924fb4178a1e5667b0aee8b282bb796bbe9623c)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW → SCAN DEPENDENCIES