npm
Malicious sturdyfetch15 @0.30.1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 12:32 PM UTC
OSV ID
MAL-2025-192866
Ecosystem
npm
Summary
The package sturdyfetch15 was found to contain malicious code.
Source: amazon-inspector (8efa01bf8ae7c64fda2970ecad836d73ed8625102c4a109ea1bff1e09c785057)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.