buttoncontent@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC
OSV ID
MAL-2026-18339
Ecosystem
npm
Summary
Package buttoncontent@0.0.0-stage contains two files with no install-time lifecycle scripts, no network activity, no filesystem reads of installer-secret paths, and no execution of fetched or obfuscated content. The version coordinate (0.0.0-stage) and minimal file count are consistent with a placeholder or staging publication rather than a functional library. No exfiltration, dropper, backdoor, silent-relay, or credential-distribution mechanism is present.
Source: amazon-inspector (e9d44a5a2d3a96bab51870b046a7d474991b20c52e850f7e5639281ba8bff80e)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.