npm
Malicious gx-npm-feature-flags @99.99.99
Vulnerability report · Last retrieved from osv.dev June 25, 2026 at 10:45 PM UTC
OSV ID
MAL-2026-6466
Ecosystem
npm
Summary
The OpenSSF Package Analysis project identified 'gx-npm-feature-flags' @ 99.99.99 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Source: ossf-package-analysis (b1c95e5e4a2cb9afebf67c805d5a74c5aba0ebedd5ed011f65dc6406b6a693cd)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.