npm

modify-setting @2.4.3

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC

Malicious

OSV ID

MAL-2026-1010

Ecosystem

npm

Summary

The package modify-setting was found to contain malicious code.

Source: amazon-inspector (48505e42b99b10152a5e8587fc88350de886a6ff02ca5b70ada3d90c9a7e980f)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.