npm
Malicious frank-at-alibaba-internal @99.9.13
Vulnerability report · Last retrieved from osv.dev July 9, 2026 at 12:27 PM UTC
OSV ID
MAL-2026-3787
Ecosystem
npm
Summary
The package frank-at-alibaba-internal was found to contain malicious code.
Source: amazon-inspector (886c65e3dc3df0890c4de06cdd9d3973fd8a5844b0db2010a08e1160d2b6dce5)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.