npm
Malicious jsonwebauth @1.1.7
Vulnerability report · Last retrieved from osv.dev August 15, 2026 at 2:36 PM UTC
OSV ID
MAL-2026-392
Ecosystem
npm
Summary
The package jsonwebauth was found to contain malicious code.
Source: amazon-inspector (683ba88a9e72aab5f114bdd388e92a35230a3fcad8178b8c8d5e5e6fddf7b829)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.