npm
Malicious nonexistent-package @99.0.3
Vulnerability report · Last retrieved from osv.dev July 8, 2026 at 7:23 PM UTC
OSV ID
MAL-2026-6936
Ecosystem
npm
Summary
No a static rule matches and no traced behavioral findings were produced for this package version. Nothing in the analyzed artifacts indicates exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or dependency-tree hijack against the installer.
Source: amazon-inspector (9393b3fc67ac5c169de7089d2f5100b5cb49af4e2b747b46726660bebc2bf66a)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.