npm

dhgshop @9.0.10

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC

Malicious

OSV ID

MAL-2026-605

Ecosystem

npm

Summary

The package dhgshop was found to contain malicious code.

Source: amazon-inspector (dcf692c43737b2f7360ab017ae983283e98b2d2591a90a3efff90685a95d2632)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.