npm
Malicious cc-double-1 @99.99.99
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 12:32 PM UTC
OSV ID
MAL-2026-11
Ecosystem
npm
Summary
The package cc-double-1 was found to contain malicious code.
Source: amazon-inspector (f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.