npm
Maliciousharlow-css-mixer@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 29, 2026 at 5:00 PM UTC
OSV ID
MAL-2026-18332
Ecosystem
npm
Summary
The package contains two files and no code paths that read installer secrets, perform install-time or import-time network fetches, execute remote content, or relay caller-supplied data to a third-party destination. No lifecycle scripts, droppers, credential reads, or exfiltration endpoints are present. The 0.0.0-stage version string is consistent with a staging/placeholder release.
Source: amazon-inspector (967e3d3d323d36c24348b9530654c33f19bb96bbc21ddeba103dd755a0c07683)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.