npm

hwi-lib @1.0.1

Vulnerability report · Last retrieved from osv.dev August 5, 2026 at 5:00 AM UTC

Malicious

OSV ID

MAL-2026-12067

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified 'hwi-lib' @ 1.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Source: ossf-package-analysis (b354ab4fac90ce3cb0a5afb1a00d518a9a44e8a4da73e66845415e69ec620973)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.