npm

resource-lease-pool @1.4.2

Vulnerability report · Last retrieved from osv.dev August 15, 2026 at 10:37 PM UTC

Malicious

OSV ID

MAL-2026-14008

Ecosystem

npm

Summary

The package was found to contain malicious code or consuming dependency that contains malicious code

Source: amazon-inspector (731d4ed32c1947117f9e7243c0179f5076213414505bf38176e660653df025f1)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.