npm
Malicious fileupload-core @2.4.3
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 11:32 AM UTC
OSV ID
MAL-2026-529
Ecosystem
npm
Summary
The package fileupload-core was found to contain malicious code.
Source: amazon-inspector (5cfeee070d9e37cd2dda0d7557f93098e1589be17d77ff38abf265f564574ca3)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.