npm
Maliciousm98vip@0.0.0-stage
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 2:03 PM UTC
OSV ID
MAL-2026-18391
Ecosystem
npm
Summary
Package m98vip at version 0.0.0-stage contains two files with no detected installer-facing threats. No lifecycle scripts, remote fetch-and-execute, credential or environment scraping, silent-relay, backdoor, or persistence mechanisms were observed. The 0.0.0-stage version string and small file count are consistent with a placeholder, test, or stub publication rather than a functional package.
Source: amazon-inspector (be41525afad86d596ecb8f7d28c8ac31b014cf81f337a0f3a548ccd8659eb452)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.