npm
Maliciousccsec-crypto-toolkit@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC
OSV ID
MAL-2026-18347
Ecosystem
npm
Summary
The package consists of 2 files with no install-time execution, no network activity, no credential or filesystem access, and no obfuscated or suspicious code patterns observed. The version suffix '0.0.0-stage' and minimal file count are consistent with a placeholder, staging, or reserved-name publication rather than a functional library.
Source: amazon-inspector (ea1ae7dd68e77ee9ae1b007dd87e4ffb8a3627f74d08f8812eca811bf2a351d4)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.