Logo
npm

m98vip@0.0.0-stage

Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 2:03 PM UTC

Malicious

OSV ID

MAL-2026-18391

Ecosystem

npm

Summary

Package m98vip at version 0.0.0-stage contains two files with no detected installer-facing threats. No lifecycle scripts, remote fetch-and-execute, credential or environment scraping, silent-relay, backdoor, or persistence mechanisms were observed. The 0.0.0-stage version string and small file count are consistent with a placeholder, test, or stub publication rather than a functional package.

Source: amazon-inspector (be41525afad86d596ecb8f7d28c8ac31b014cf81f337a0f3a548ccd8659eb452)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.