npm

medusa-plugin-product-reviews-kvy@0.0.4

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 9:42 AM UTC

Malicious

OSV ID

MAL-2025-190776

Ecosystem

npm

Summary

The package medusa-plugin-product-reviews-kvy was found to contain malicious code.

Source: amazon-inspector (0d400830b8f3bd9546ee8f7f68bfb8028db23280c0f6a1c4f494e4eebf65df6f)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.