npm
Malicious@osmanekrem/bmad@1.0.6
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 4:45 PM UTC
OSV ID
MAL-2025-191046
Ecosystem
npm
Summary
The package @osmanekrem/bmad was found to contain malicious code.
Source: amazon-inspector (944b38bf9ed936861ce98cafc711d3d8a8b9cacdc551e5ea1142ea4143cb60aa)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.