Logo
npm

camelotlabs-worker@0.0.0-stage

Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC

Malicious

OSV ID

MAL-2026-3644

Ecosystem

npm

Summary

The package consists of two files with no a static rule matches and no traced installer-harm behavior. No lifecycle scripts, no outbound network calls to attacker-controlled destinations, no credential or environment reads, no filesystem persistence, and no code fetched or executed from remote sources are observable. The '0.0.0-stage' version string and minimal content suggest a staging or placeholder release rather than a functional library.

Source: amazon-inspector (0e0782db9a7d33e51ab9524a42a292ca4079dbd07ae25c7fb57a51877647fa98)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.