npm
Malicious pp-react-v5 @10.0.0
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC
OSV ID
MAL-2026-3509
Ecosystem
npm
Summary
The package pp-react-v5 was found to contain malicious code.
Source: amazon-inspector (667950ffe2ed24a98495c0d8d6c3430e3538523c5811caf9fbda829b0773163f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.