npm

sort-by-distance@2.0.1

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 7:42 AM UTC

Malicious

OSV ID

MAL-2025-191011

Ecosystem

npm

Summary

The package sort-by-distance was found to contain malicious code.

Source: amazon-inspector (0e18da0b56bd15f23c5f0d3dcb5a2f08b07ee8e495d121029cbeebaf023ce50f)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.