npm

@medusajs/medusa@2.11.4-preview-20251124090208

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 10:42 AM UTC

Malicious

OSV ID

MAL-2025-191457

Ecosystem

npm

Summary

The package @medusajs/medusa was found to contain malicious code.

Source: amazon-inspector (3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.