npm
Malicious json-dec @4.3.19
Vulnerability report · Last retrieved from osv.dev July 16, 2026 at 7:58 PM UTC
OSV ID
MAL-2026-3007
Ecosystem
npm
Summary
The package json-dec was found to contain malicious code.
Source: amazon-inspector (de1db9ce26e4c5f4788ebbf809fede48364dd0741a8f4d0aa5580fac4b199f59)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.