npm
Malicious cko-ui-toolkit @99.99.9
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 9:32 AM UTC
OSV ID
MAL-2026-193
Ecosystem
npm
Summary
The package cko-ui-toolkit was found to contain malicious code.
Source: amazon-inspector (8bd7dceb0840c7e96ac7bbc186b43c5a28941546823b4a13888aad0870a5aaa9)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.