Logo
npm

csec-form-validator@0.0.0-stage

Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 4:00 PM UTC

Malicious

OSV ID

MAL-2026-18352

Ecosystem

npm

Summary

The package consists of two files with a pre-release version suffix (0.0.0-stage) suggesting a placeholder or staging publication. No install-time lifecycle execution, no network I/O, no credential or environment reads, no filesystem writes outside the package directory, and no obfuscated or dynamically fetched code were observed. The package exposes no behavior that affects an installer's machine, credentials, or dependency resolution.

Source: amazon-inspector (ae9c21d4483a24c6cb9c8d70bc589a499b7c4bd952b99cc3e2502c276e8ce6c6)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.