npm

@jesusvizcaino2021/com.baogong.app-push-permission @101.1.3

Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC

Malicious

OSV ID

MAL-2026-2916

Ecosystem

npm

Summary

The package @jesusvizcaino2021/com.baogong.app-push-permission was found to contain malicious code.

Source: amazon-inspector (457170b51d87c7f84644a72a71a9979508a99061e7e8fdee3aa8c2e170493b12)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.