npm
Maliciousinstacart-ui@296.8.0
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 6:45 PM UTC
OSV ID
MAL-2025-190612
Ecosystem
npm
Summary
The package instacart-ui was found to contain malicious code.
Source: amazon-inspector (3e2fadf49fd1948b4d1d7049083d559cfdaec04a7247f1355729b1278b9bd3e2)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.