npm

set-nested-prop@2.0.2

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 9:42 AM UTC

Malicious

OSV ID

MAL-2025-191010

Ecosystem

npm

Summary

The package set-nested-prop was found to contain malicious code.

Source: amazon-inspector (1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.