npm
Malicious df-sandbox-test @1.1.0
Vulnerability report · Last retrieved from osv.dev August 17, 2026 at 6:39 AM UTC
OSV ID
MAL-2026-2498
Ecosystem
npm
Summary
The package df-sandbox-test was found to contain malicious code.
Source: amazon-inspector (97761ee82976dcee2c3d8438258e8ace733bec2d2c7e1020035e9e390f9fa02f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.