npm
Malicious@sme-ui/aoma-vevasound-metadata-lib@0.1.3
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 7:45 PM UTC
OSV ID
MAL-2025-191321
Ecosystem
npm
Summary
The package @sme-ui/aoma-vevasound-metadata-lib was found to contain malicious code.
Source: amazon-inspector (2ced8f74d8984f217db135b6a331c5aeee6463823f29d90c9e15fa6473aa8fd3)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.