npm
Malicious apple-cloudkit-internal @1000.0.1
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC
OSV ID
MAL-2026-2918
Ecosystem
npm
Summary
The package apple-cloudkit-internal was found to contain malicious code.
Source: amazon-inspector (1cfcd7e5376478b86db5942e2492ae0763bad14dda004c55988edf420f5e62ce)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.