npm
Malicious@signals-notebook/annotation-editor@2.2.60-630109c
Vulnerability report · Last retrieved from osv.dev November 4, 2026 at 2:27 PM UTC
OSV ID
MAL-2026-18604
Ecosystem
npm
Summary
Malicious code in @signals-notebook/annotation-editor (npm)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.