npm
Malicious @gocortexio/npmgremlinbox-agpl-1-0-only @2.1.0
Vulnerability report · Last retrieved from osv.dev August 5, 2026 at 5:03 PM UTC
OSV ID
MAL-2026-10784
Ecosystem
npm
Summary
No a static rule matches and no traced behavioral findings were produced for this package version. With no evidence of exfiltration, install-time fetch-and-execute, credential harvesting, silent-relay, backdoor, or dependency-chain dropper behavior, there is no basis to block or route for review.
Source: amazon-inspector (d6b2260e2800619ccb9a093618b29bba531fdca6348febc8547be7d925da7b4c)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.