npm
Malicious @voxepay/checkout @0.5.19
Vulnerability report · Last retrieved from osv.dev August 6, 2026 at 7:08 PM UTC
OSV ID
MAL-2026-13389
Ecosystem
npm
Summary
No suspicious behaviors were identified in this package version. There are no install-time lifecycle scripts performing remote fetches, no hardcoded attacker-controlled network destinations, no credential or environment scraping, no obfuscated payloads, and no dropper or backdoor patterns. Package contents are consistent with a checkout SDK library.
Source: amazon-inspector (0ce33339fdc1c4c994f6062588e4f4278ee9074ddb04759504100e89084f4a96)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.