npm
Malicious @wbgo/shared @99.99.10
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC
OSV ID
MAL-2026-266
Ecosystem
npm
Summary
The package @wbgo/shared was found to contain malicious code.
Source: amazon-inspector (fdb329e935e8aeef2d3a86a6d85a8b57f76574d7e339b3d50c0504601b9e67e1)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.