Logo
npm

hello-shai@1.0.1

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 1:44 PM UTC

Malicious

OSV ID

MAL-2025-47450

Ecosystem

npm

Summary

This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub before propogating itself to NPM packages the user owns.

Source: google-open-source-security (297f2a57d1c225e18d8464c2024daef4567955be0eb8cd8d45052aa778fb4f3a)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES