Logo
npm

@opap/player-kyc-widget @3.999.999

Vulnerability report · Last retrieved from osv.dev August 24, 2026 at 4:15 AM UTC

Malicious

OSV ID

MAL-2026-14387

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified '@opap/player-kyc-widget' @ 3.999.999 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Source: ossf-package-analysis (98e627cea85331a67652aa65927058579efe7046253a9ef22cb70b1d73916885)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW → SCAN DEPENDENCIES