npm
Malicious@jasperquinn/postcss-motion-helpers@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 2:03 PM UTC
OSV ID
MAL-2026-18379
Ecosystem
npm
Summary
Package @jasperquinn/postcss-motion-helpers at version 0.0.0-stage ships a minimal file set (2 files) with no lifecycle scripts, no network activity, no filesystem access outside the package, no credential reads, and no obfuscated or dynamically executed code identified. The version suffix and small file count are consistent with a staging or placeholder publish rather than a functional release.
Source: amazon-inspector (f2b00f98b05ef64aa83ba1f6d04dfcd96791446c4c45e34f5b5855c56ec2eedb)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.