Logo
npm

@strong-energetic/test-banned-file@1.0.1

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 4:45 PM UTC

Malicious

OSV ID

MAL-2025-47421

Ecosystem

npm

Summary

This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub before propogating itself to NPM packages the user owns.

Source: google-open-source-security (beb2182dad9121d8cdfbd98f321d90cd62cda75f2c4ef68f1a5e22608808dc91)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES