789bet-login-th@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 2:03 PM UTC
OSV ID
MAL-2026-18384
Ecosystem
npm
Summary
The package ships minimal content (2 files scanned) with no lifecycle scripts, no install-time or import-time network activity, no credential or filesystem access targeting the installer, and no obfuscated or fetched-and-executed payload. The package name appears to be SEO/affiliate-style for a gambling site, which is a quality and registry-policy concern but not a supply-chain attack against installers.
Source: amazon-inspector (daf974d2b6e808204775e9ca87b873c9099e447c29af9ea50d1c1ef019c1f25c)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.