npm
Malicious oneday-worm-research @1.0.4
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC
OSV ID
MAL-2025-192849
Ecosystem
npm
Summary
The package oneday-worm-research was found to contain malicious code.
Source: amazon-inspector (e5cc173214371a2dfaa01a87455b2deadd72f9169e423a8d14da6553747fdbdc)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.