npm
Maliciousm98bet@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 2:03 PM UTC
OSV ID
MAL-2026-18389
Ecosystem
npm
Summary
Package m98bet@0.0.0-stage contains only two files and no install-time lifecycle hooks, network destinations, credential reads, or executable payloads were observed. No evidence of exfiltration, remote code execution, silent relay, backdoor, or dependency-chain dropper behavior is present in the shipped contents. The package appears to be a placeholder or stub release.
Source: amazon-inspector (824a76afd7e7916bcf5056e72d7486a3be06a847e407dff3a1417873ecaf9095)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.