npm
Maliciousarray-inline-transform@1.0.0
Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 5:00 PM UTC
OSV ID
MAL-2026-17934
Ecosystem
npm
Summary
The package contains a small number of files and no static or traced findings indicate credential access, install-time code fetch/execute, silent relay of caller data, backdoor, or self-propagation behavior. No lifecycle scripts, obfuscated payloads, or hardcoded exfiltration endpoints were observed.
Source: amazon-inspector (56155285d4d49f75322eac616667d54fabe1c19efbf500a0cd631c479380d5bb)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.