npm
Malicious express-deflect @1.6.12
Vulnerability report · Last retrieved from osv.dev July 10, 2026 at 1:30 AM UTC
OSV ID
MAL-2026-6908
Ecosystem
npm
Summary
The package was found to contain malicious code or consuming dependency that contains malicious code
Source: amazon-inspector (284d3f4c5f55f69391b1172ba9d2c714e3ae358a2c92a501049a1495547e1588)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.