npm
Maliciousesbuild-plugin-httpfile@0.4.1
Vulnerability report · Last retrieved from osv.dev October 9, 2026 at 9:47 AM UTC
OSV ID
MAL-2025-190771
Ecosystem
npm
Summary
The package esbuild-plugin-httpfile was found to contain malicious code.
Source: amazon-inspector (efc9c8640b4324e3d5e06e51fa01e3029117ab9121c0baa55b1f81b1b73019a8)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.