Logo
npm

trezor-lib @1.0.0

Vulnerability report · Last retrieved from osv.dev August 5, 2026 at 5:00 AM UTC

Malicious

OSV ID

MAL-2026-12078

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified 'trezor-lib' @ 1.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Source: ossf-package-analysis (d81bc24e9f56c5ca72558e331a2d0fae1d514c1c3fe26d275b5885c91a8a72f5)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW → SCAN DEPENDENCIES