npm
Malicious @mesh-components/card @99999.0.0
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC
OSV ID
MAL-2026-2022
Ecosystem
npm
Summary
The package @mesh-components/card was found to contain malicious code.
Source: amazon-inspector (3c96d53100e05047008977d25b2800e9da6e1d83f42874dcf6be5ed4144d3d83)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.