npm
Malicious@postman/postman-mcp-cli@1.0.5
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 4:45 PM UTC
OSV ID
MAL-2025-190908
Ecosystem
npm
Summary
The package @postman/postman-mcp-cli was found to contain malicious code.
Source: amazon-inspector (10b1da432f0b6ecaccc97520bb9697e6dbf44b04415bd15e6ac9864c86f3b37e)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.