Logo
npm

csec-crypto-toolkit@0.0.0-stage

Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC

Malicious

OSV ID

MAL-2026-18351

Ecosystem

npm

Summary

Package csec-crypto-toolkit version 0.0.0-stage ships two files and no detectable installer-harm behavior. No lifecycle scripts (preinstall/install/postinstall/prepare) that fetch or execute remote content were observed, no credential or environment-variable harvesting was observed, no network beacons to attacker-controlled destinations were observed, and no dropper, backdoor, or self-propagation mechanisms were observed. The version suffix 0.0.0-stage is consistent with a placeholder/staging publish rather than a functional release.

Source: amazon-inspector (2abb8bc55cfdb0121f6d5699665198f00bd78fbbaa555a695f2fe5188c733ef5)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.