npm
Maliciousepic-node-purchase@1.0.0
Vulnerability report · Last retrieved from osv.dev September 25, 2026 at 7:00 AM UTC
OSV ID
MAL-2025-49171
Ecosystem
npm
Summary
The package epic-node-purchase was found to contain malicious code.
Source: amazon-inspector (d63337f3a030d3ef393954fc2e0063f3a328979d065839f7c01f6e089e6a0689)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.