Logo
npm

edu-npm-dependency-chain-demo @1.0.4

Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC

Malicious

OSV ID

MAL-2026-5623

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified 'edu-npm-dependency-chain-demo' @ 1.0.4 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Source: ossf-package-analysis (5a2508b833cc9048538d7b995e19fdc3abb6807800a2650ef808f248a3502139)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW → SCAN DEPENDENCIES