Logo
npm

8i7pp4@0.0.0-stage

Vulnerability report · Last retrieved from osv.dev October 20, 2026 at 10:24 PM UTC

Malicious

OSV ID

MAL-2026-17952

Ecosystem

npm

Summary

Package 8i7pp4 version 0.0.0-stage contains only two files and no detected behaviors of concern. There are no lifecycle scripts fetching or executing remote content, no reads of installer secrets (environment variables, SSH/AWS/npm credentials, browser or wallet stores), no outbound network calls to attacker-controlled destinations, no obfuscated payloads, and no persistence or backdoor mechanisms. The version suffix and minimal file count are consistent with a placeholder, staging, or test publication rather than functional code.

Source: amazon-inspector (c623f39e0d4b0b51a05de329eccc8daa9ea567d83dc8365f3523462b2bd08b09)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.