npm
Malicious789bet-vip@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 2:03 PM UTC
OSV ID
MAL-2026-18386
Ecosystem
npm
Summary
789bet-vip@0.0.0-stage is a minimal npm package (2 files) with no install lifecycle scripts, no network activity, no credential access, and no executable logic observed in its contents. The package name suggests a promotional or placeholder registration rather than a functional library, and no code paths that would harm an installer are present.
Source: amazon-inspector (4abb3e4b3a01fecb2b28af9d833cb422943367e8901fabd11cff9125ed891305)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.