npm
Malicious express-sessions-id @3.7.5
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 12:32 PM UTC
OSV ID
MAL-2026-218
Ecosystem
npm
Summary
The package express-sessions-id was found to contain malicious code.
Source: amazon-inspector (50976a5a79aa6e9a71eee66f3a74059d86a7620d670cf19ad43c9eb3619b0c2e)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.