csec-crypto-toolkit@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC
OSV ID
MAL-2026-18351
Ecosystem
npm
Summary
Package csec-crypto-toolkit version 0.0.0-stage ships two files and no detectable installer-harm behavior. No lifecycle scripts (preinstall/install/postinstall/prepare) that fetch or execute remote content were observed, no credential or environment-variable harvesting was observed, no network beacons to attacker-controlled destinations were observed, and no dropper, backdoor, or self-propagation mechanisms were observed. The version suffix 0.0.0-stage is consistent with a placeholder/staging publish rather than a functional release.
Source: amazon-inspector (2abb8bc55cfdb0121f6d5699665198f00bd78fbbaa555a695f2fe5188c733ef5)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.