npm
Malicious pump-stream-logger @1.0.0
Vulnerability report · Last retrieved from osv.dev July 10, 2026 at 1:30 AM UTC
OSV ID
MAL-2026-6507
Ecosystem
npm
Summary
The package was found to contain malicious code or consuming dependency that contains malicious code
Source: amazon-inspector (46b661475c354a21044517667315f026469d531e459803f8d4d9586e5cb67f74)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.