camelotlabs-config@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC
OSV ID
MAL-2026-3640
Ecosystem
npm
Summary
Package camelotlabs-config@0.0.0-stage ships a minimal two-file tarball with a stage-tagged pre-release version (0.0.0-stage). No lifecycle scripts, no install-time or import-time network activity, no credential or filesystem access, no silent-relay behavior, and no dependency-chain dropper structure are present in the shipped contents. The package appears to be a placeholder or staging release with no observable supply-chain attack surface.
Source: amazon-inspector (49b3dda5890c72b97268b815978c7089ba226714024041ecf060602e54e93f67)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.