npm
Malicioushl-naduccio@1.0.7
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 4:45 PM UTC
OSV ID
MAL-2025-191538
Ecosystem
npm
Summary
The package hl-naduccio was found to contain malicious code.
Source: amazon-inspector (f7193ea32e3d2686d1c8a3d6a7f78a78a41f3d8cf1441595f7a323029b4b9ac7)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.