Logo
npm

@nativescript-community/ui-document-picker@1.1.28

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 1:44 PM UTC

Malicious

OSV ID

MAL-2025-47387

Ecosystem

npm

Summary

This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub before propogating itself to NPM packages the user owns.

Source: google-open-source-security (46d11dbb6f2ddb5b46be5e63a827af98e3f887baac9c3df11be485d8326089b2)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES