npm
Malicious apple-internal-config @100.6.0
Vulnerability report · Last retrieved from osv.dev July 9, 2026 at 12:27 PM UTC
OSV ID
MAL-2026-3168
Ecosystem
npm
Summary
The package apple-internal-config was found to contain malicious code.
Source: amazon-inspector (16ae120f182e305f15d778dfe594aa3f79076b93b5bd4be77f293fdf08c5e12a)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.