Logo
npm

calculator-preinstall-chain-demo@1.1.2

Vulnerability report · Last retrieved from osv.dev November 2, 2026 at 8:15 AM UTC

Malicious

OSV ID

MAL-2026-18453

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified 'calculator-preinstall-chain-demo' @ 1.1.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Source: ossf-package-analysis (88c07c18a13b451e734355c6d2bb4ca05dc4c76209fe483b97403c968c09c0ea)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.