Malicious
OSV ID
MAL-2025-6072
Ecosystem
npm
Summary
The OpenSSF Package Analysis project identified 'anchor5' @ 1.2.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Source: ossf-package-analysis (f8d44079a1abc61c092193be41f21fe5d45b1f7231f539e42efbef50278baa80)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.