Logo
npm

@regex33-hackerone/tb-compat@1.0.0

Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC

Malicious

OSV ID

MAL-2026-18310

Ecosystem

npm

Summary

Package @regex33-hackerone/tb-compat@1.0.0 contains two files with no detected malicious behavior. No install-time lifecycle scripts fetching remote content, no credential or environment scraping, no hardcoded exfiltration endpoints, no obfuscated payloads, and no silent-relay or backdoor patterns were identified in the scanned contents. The hackerone scope suggests the package may be associated with security research or a bug-bounty researcher's test artifact.

Source: amazon-inspector (dfbbff5e8cb2f0f8b14d300fed9343e48339c9c4e52579af53f926ced1218922)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.